Lucene search
+L

7502 matches found

NVD
NVD
added 2026/01/22 5:16 p.m.9 views

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2025-68006

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

6.5CVSS0.00355EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2025-67963

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...

8.6CVSS0.00552EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.6 views

CVE-2025-67953

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

8.1CVSS0.00338EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/22 5:16 p.m.4 views

CVE-2025-67954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

6.5CVSS0.00355EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.3 views

CVE-2026-24371

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

9.8CVSS5.3AI score0.00155EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.30 views

CVE-2026-24371 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

4.3CVSS0.00155EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.3 views

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS5.3AI score0.0028EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.4 views

CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

5.9AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.21 views

CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.17 views

CVE-2025-68027

CVE-2025-68027 : The Hydra Booking (Themefic Hydra Booking) WordPress plugin suffers an unauthenticated privilege escalation due to an incorrect privilege assignment in versions up to 1.1.32. The vulnerability enables elevation of privileges within Hydra Booking (hydra-booking) as described in pu...

7.3CVSS5.4AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.15 views

CVE-2025-68006

CVE-2025-68006 describes a vulnerability in Deetronix Booking Ultra Pro (booking-ultra-pro) where insertion of sensitive information into sent data can lead to retrieval of embedded sensitive data. Affected software: Booking Ultra Pro up to and including version 1.1.23 (n/a to

6.5CVSS5.4AI score0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.4 views

CVE-2025-68006 WordPress Booking Ultra Pro plugin <= 1.1.23 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

5.9AI score0.00355EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.4 views

CVE-2025-68006

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

6.5CVSS5.3AI score0.00355EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.22 views

CVE-2025-68006 WordPress Booking Ultra Pro plugin <= 1.1.23 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through = 1.1.23...

6.5CVSS0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-67963 WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...

5.9AI score0.00552EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.21 views

CVE-2025-67963 WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...

8.6CVSS0.00552EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.17 views

CVE-2025-67963

CVE-2025-67963 refers to the WordPress plugin Movie Booking (ovatheme Movie Booking) , affected up to version 1.1.5 . The incident is described as an unauthenticated, high-severity path traversal/arbitrary file deletion vulnerability that could enable deletion of arbitrary files on affected sites...

8.6CVSS5.4AI score0.00552EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.4 views

CVE-2025-67963

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...

8.6CVSS5.4AI score0.00552EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-67954 WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

5.9AI score0.00355EPSS
SaveExploits0References1
Rows per page
Query Builder