355 matches found
CVE-2025-10124
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
CVE-2025-10124
CVE-2025-10124 concerns the Booking Manager WordPress plugin, version
CVE-2025-10124 Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
PT-2025-41504
Name of the Vulnerable Software and Affected Versions The Booking Manager WordPress plugin versions prior to 2.1.15 Description The Booking Manager WordPress plugin has an issue where a shortcode capable of deleting bookings is registered and accessible to users with contributor privileges or...
Attackers Actively Exploiting Critical Vulnerability in Service Finder Bookings Plugin
📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🚀 Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,2...
EUVD-2008-0305
Malware in sbrugna...
VulnCheck KEV: CVE-2025-5947
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the servicefinderswitchback function...
EUVD-2025-12542
Malicious code in bioql PyPI...
EUVD-2025-21637
Malicious code in bioql PyPI...
EUVD-2023-51885
Malicious code in bioql PyPI...
EUVD-2024-29028
Malicious code in bioql PyPI...
EUVD-2025-30237
Malicious code in bioql PyPI...
EUVD-2024-30272
Malicious code in bioql PyPI...
EUVD-2024-17079
Malicious code in bioql PyPI...
EUVD-2023-49929
Malicious code in bioql PyPI...
EUVD-2023-36972
Malicious code in bioql PyPI...
CVE-2025-5948
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...
CVE-2025-5948 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...
CVE-2025-5948 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...