← All advisories

Critical severity9.8NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026

CVE-2016-10909

CVE-2016-10909

Description

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Codepeople/Booking Calendar Contact Form
cpe:2.3:a:codepeople:booking_calendar_contact_form:*:*:*:*:*:wordpress:*:*
Range: <1.0.24
WordPress/booking-calendar-contact-formdescription
WordPress/Booking Calendar Contact Formllm-fuzzy
Range: <1.0.24
Package: https://wordpress.org/plugins/booking-calendar-contact-form

Patches

Vulnerability mechanics

References

1

wordpress.org/plugins/booking-calendar-contact-form/nvdRelease Notes

News mentions

0

No linked articles in our index yet.