Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar

Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Server-Side Request Forgery (SSRF).

Every one of the 5 issues recorded for Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each. Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2023-50840

Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode

Read the full analysis

Vulnerability Records

5 records


2026-05-29 00:00	Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting Booking Manager <= 2.1.18	`CVE-2026-42751`	6.4 Medium	dodoh4t	Yes
2025-11-04 00:00	Booking Manager <= 2.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting Booking Manager <= 2.1.17	`CVE-2025-64275`	6.4 Medium	Jan Barszcz	Yes
2025-09-19 00:00	Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.14 - Authenticated (Contributor+) Booking Deletion Booking Manager <= 2.1.14	`CVE-2025-10124`	5.3 Medium	Khaled Alenazi (Nxploited)	Yes
2023-12-21 00:00	Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode Booking Manager < 2.1.6	`CVE-2023-50840`	8.8 High	Ngô Thiên An (ancorn_)	Yes
2023-04-26 00:00	Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery Booking Manager <= 2.0.28	`CVE-2023-1977`	6.3 Medium	Shreya Pohekar	Yes

Showing 1–5 of 5 reports

Latestv2.1.20

Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar

Author

wpdevelop

4.0(2)

80/100

Last Updated

2026-07-28 (2mo ago)

Active Installs

5,000+

Downloads

179,017

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 7.0.4

Created

2010-07-31 (16y ago)

Booking Manager plugin can easily show list of events in customizable way from external .ics feeds at your website. Booking Manager have native integration with Booking Calendar plugin. It can sync bookings from Booking Calendar with different sources (Airbnb, Booking.com, HomeAway, TripAdvisor, VRBO, FlipKey and any other calendar that uses .ics format). Plugin Homepage | Support Booking Manager IS GREAT FOR Listing of upcoming events at your website from .ics feeds Sync bookings from different sources with Booking Calendar plugin FEATURES List of events from external .ics feeds. Ability to upload .ics file(s) to your website and use it. Customization of events listing template – it’s how events showing at front-end side of your website. Easily inserting shortcode for events listing into any post or page via popup dialog, where you can select different parameters. Setting different parameters for events listing, like “start from” and “finish to” dates, etc… Native integration with Booking Calendar plugin. Sync bookings from Booking Calendar with different sources (Airbnb, Booking.com, HomeAway, TripAdvisor, VRBO, FlipKey and any other calendar that uses .ics format). Import .ics feeds (files) into Booking Calendar. Its useful, if you need to import bookings from multiple external websites into one calendar in Booking Calendar plugin. Export .ics feeds (files) from Booking Calendar. You can publish bookings from Booking Calendar as .ics feeds at different pages, and then import such bookings in your other different website, like Airbnb. Configure URLs for pages where you want to publish your ics feeds. Mobile friendly.

View on WordPress.org