Bookit — Booking & Appointment Calendar

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 23% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ marperacet

   2.0y ago

   Excelent

   Read on wp.org ↗
2. ★★★★★ George Pattichis

   2.4y ago

   Worked great for me. Even the free version offers lots of features that others charge for. Also, seeing the Events Calendar team picking this up means future updates coming up rock solid. Thanks!

   Read on wp.org ↗
3. ★★★★★ hreinink

   2.5y ago

   Looks like StyleMixThemes is going for increase of revenue with less effort. First I discovered it with their Themes. Now with this plugin. I’ve had this plugin for years, removed it after I no longer offered any services, and now I want to reinstall it, and the Google integration is now a 19,99 add for 1 site. Also paid services is a paid add on. So don’t be triggered by the free plugin. It’s not easy to use without the additional paid integrations.

   Read on wp.org ↗
4. ★★★★★ medi3

   2.8y ago

   Payed Plugin crashes when you choose your own colours. It is also a big minus that between booking you don’t have an option for a break time. Also I have noticed if the booking appointments is a three hour long and it starts from 9 am – 12 pm.. than the other costumer has the option to book it from 10 am – 1 pm – which is not ok. If someone books the first hour, than you can not book until 12.15 pm. or 1 pm. This is why period time is needed, and so the other booking do not cover them selves up. Please fix this. This topic was modified 2 years, 8 months ago by medi3.

   Read on wp.org ↗
5. ★★★★★ sebastienbrochot

   2.9y ago

   I had 2 problems with this plugins (the free one and the 2 sold) : the plugin is not fully translatable, even using Loco Translate. You have to edit the plugin files, which is painful and risky. The other problem was with the Google Calendar synch, that didn’t work for me even following step by step the documentation and reinstalling/retrying from scratch multiple times. I opened a ticket. Waited and waited. After 6 days, I asked for a refund. Suddenly, someone was ready to help me. It was too late, I already found another solution that works well on my site. THEY REFUSED TO REFUND THE PLUGINS ($200!) despite being 6 days after buying it, and asking repeatedly for assistance without being answered!

   Read on wp.org ↗
6. ★★★★★ cieszkos

   3.4y ago

   Plugin is not compatibile with PHP 8.X E-mail notifications doesn’t send… The rest of functionalities works. This topic was modified 3 years, 3 months ago by cieszkos.

   Read on wp.org ↗
7. ★★★★★ Babak

   3.5y ago

   How to active Auto Approve all appointments? It’s not easy for clients to keep logging in wordpress to approve appointments

   Read on wp.org ↗
8. ★★★★★ imagiobox

   3.5y ago

   i need help, staff login redirects to my-account, also notification emails are not receiving neither for admins nor for customers.Also the booking page get stuck in the loading animation, can you share your support email address? phone number of chat link?

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-26 Version 2.6.0.3 Security – Harden the PayPal payment handler. 2.6.0.3
2. 2026-08-17 Version 2.6.0.2 Security – Harden the booking AJAX endpoint. Fix – Reused an existing customer for repeat guest bookings instead of creating duplicate records. 2.6.0.2
3. 2026-07-29 Version 2.6.0.1 Security – Harden the day-appointments AJAX endpoint. [SVUL-L48] 2.6.0.1
4. 2026-07-08 Version 2.6.0 Security – Require login or registration before completing a booking in Registered mode, and link the booking to the current user. [SVUL-31] Security – Harden the booking and customer account AJAX endpoints. [SVUL-26] 2.6.0
5. 2026-05-29 Version 2.5.5 Fix – Resolved an issue that prevented Stripe from connecting. [BI-48] 2.5.5
6. 2026-04-09 Version 2.5.4.1 Security – Add validation to Payment Intent in AJAX endpoints. [SVUL-67] 2.5.4.1

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Bookit — Booking & Appointment Calendar <= 2.5.1 - Missing Authorization ↗
   2026-04-22 CVE-2026-40780 Missing Authorization Affects <= 2.5.1 Patched in 2.5.4.1
2. Medium · 5.3 Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Settings Update ↗
   2025-11-15 CVE-2025-12841 Missing Authorization Affects <= 2.5.0 Patched in 2.5.1
3. High · 7.5 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection ↗
   2025-11-11 CVE-2025-12633 Missing Authorization Affects <= 2.5.0 Patched in 2.5.1
4. Medium · 4.9 BookIt <=2.4.0 - Price Bypass ↗
   2024-01-31 CVE-2024-24715 Improper Authorization Affects <= 2.4.0 Patched in 2.4.1
5. Medium · 6.6 BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection ↗
   2023-12-21 CVE-2023-50852 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.4.4 Patched in 2.4.4
6. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.9 Patched in 2.4.0
7. Critical · 9.8 BookIt <= 2.3.7 - Authentication Bypass ↗
   2023-06-20 CVE-2023-2834 Authentication Bypass Using an Alternate Path or Channel Affects <= 2.3.7 Patched in 2.3.8
8. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.2.9 Patched in 2.2.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 23 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-20 5K+ → 4K+ down after 196 days in tier
2. 2025-10-06 6K+ → 5K+ down after 183 days in tier
3. 2025-04-06 7K+ → 6K+ down after 149 days in tier
4. 2024-11-08 8K+ → 7K+ down after 132 days in tier
5. 2024-06-29 9K+ → 8K+ down after 94 days in tier
6. 2024-03-27 10K+ → 9K+ down after 1 days in tier
7. 2024-03-26 9K+ → 10K+ up after 2 days in tier
8. 2024-03-24 10K+ → 9K+ down after 21 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Appointment Booking Calendar 1K+ installs · 4.2★ · 4 shared tags A
• Online Scheduling and Appointment Booking System – Bookly 60K+ installs · 4.4★ · 3 shared tags A
• Appointment Hour Booking – Booking Calendar 10K+ installs · 4.9★ · 3 shared tags A
• Hydra Booking — Appointment Scheduling & Booking Calendar 2K+ installs · 4.1★ · 3 shared tags A
• Booktics – Appointment Booking Calendar for Service Businesses 700+ installs · 4.2★ · 3 shared tags A
• TrueBooker – Appointment Booking and Scheduler System 600+ installs · 4.5★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Bookit — Booking & Appointment Calendar into a readme, a review or a deck. It updates itself.

Bookit — Booking & Appointment Calendar: 4K+ active installs, 3.8★ (24 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/bookit