BizCalendar Web

BizCalendar Web has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include PHP Remote File Inclusion, SQL Injection.

Every one of the 3 issues recorded for BizCalendar Web has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. BizCalendar Web is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BizCalendar Web vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2025-7650

BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

3 records


2025-08-14 20:14	BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion BizCalendar Web <= 1.1.0.53	`CVE-2025-7650`	7.5 High	Muhammad Yudha - DJ	Yes
2025-03-27 00:00	bizcalendar-web <= 1.1.0.34 - Authenticated (Administrator+) SQL Injection BizCalendar Web <= 1.1.0.34	`CVE-2025-30843`	4.9 Medium	Phan Trong Quan	Yes
2024-04-09 00:00	BizCalendar Web <= 1.1.0.25 - Reflected Cross-Site Scripting via 'tab' BizCalendar Web <= 1.1.0.25	`CVE-2024-1780`	6.1 Medium	Nathaniel Oh (Calysteon)	Yes

Showing 1–3 of 3 reports

Plugin Profile

Latestv1.1.0.72

BizCalendar Web

Author

setriosoft

0.0(0)

0/100

Last Updated

2026-08-18 (26d ago)

Active Installs

30+

Downloads

8,206

Requires WP

4.9+

Requires PHP

5.3.0+

Tested up to

WP 7.0.4

Created

2018-06-30 (8y ago)

Romana Acest modul permite afisarea in orice site WordPress a unui formular prin care se pot face programari online pentru o clinica medicala care foloseste aplicatia BizMedica (http://www.setrio.ro/bizmedica/). Pentru ca modulul sa functioneze corect, acesta transfera toate datele introduse in formular catre un serviciu web extern inclus in aplicatia BizMedica, care este gazduit pe serverul clinicii medicale. De asemenea, el preia date despre medici, specialitati medicale, intervale orare disponibile, etc. din acest serviciu. Toata comunicatia intre serverul WordPress si serviciul extern BizMedica se face criptat, prin protocolul HTTPS. English This plugin allows you to display a form on any WordPress site which allows you to make online appointments for any medical clinic using BizMedica software solutions (http://www.setrio.ro/bizmedica/). In order for the correct function of the plugin, it transfers all the data entered into the form to an external web service included in the BizMedica application, which is hosted on the medical clinic server. It also downloads data about physicians, medical specialties, available time slots, etc. from this external service. All communication between the WordPress server and the BizMedica external service is encrypted through the HTTPS protocol.

View on WordPress.org