TI-2023-09778 CVE-2023-23991 · GHSA-3j8g-45hc-8h5fWordPress Booking Calendar plugin <= 9.4.3 - SQL InjectionPriority LOW 34Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugins Booking Calendar allows SQL Injection.This issue affects Booking Calendar: from n/a through 9.4.3…CVSS 3.1HIGH 7.6· Network · High privileges · No interaction · EPSS 0.00515 · Published 2024-03-26 · No fix listed CWE-89