Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

8871 matches found

NVD
NVD•added 2025/11/13 10:15 a.m.•9 views

CVE-2025-64381

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Booking Calendar booking allows Stored XSS.This issue affects Booking Calendar: from n/a through = 10.14.7...

6.5CVSS0.00154EPSS
SaveExploits0References1
NVD
NVD•added 2025/11/13 10:15 a.m.•14 views

CVE-2025-64261

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

5.4CVSS0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/11/13 9:24 a.m.•20 views

CVE-2025-64381 WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Booking Calendar booking allows Stored XSS.This issue affects Booking Calendar: from n/a through = 10.14.7...

6.5CVSS0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/11/13 9:24 a.m.•3 views

CVE-2025-64381 WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Booking Calendar booking allows Stored XSS.This issue affects Booking Calendar: from n/a through = 10.14.7...

6.5CVSS5.3AI score0.00154EPSS
SaveExploits0References1
CVE
CVE•added 2025/11/13 9:24 a.m.•27 views

CVE-2025-64381

CVE-2025-64381 affects the WordPress Booking Calendar plugin up to version 10.14.7. It is a stored XSS caused by improper input neutralization during web page generation. Impact isStored XSS on affected pages. Remediation: upgrade to a fixed version/newer release as indicated by vendor advisories...

6.5CVSS5.6AI score0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/11/13 9:24 a.m.•6 views

CVE-2025-64261 WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

5.4CVSS6.6AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2025/11/13 9:24 a.m.•22 views

CVE-2025-64261 WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

5.4CVSS0.00196EPSS
SaveExploits0References1
CVE
CVE•added 2025/11/13 9:24 a.m.•24 views

CVE-2025-64261

CVE-2025-64261 affects the WordPress plugin Appointment Booking Calendar (versions =1.3.95) or apply vendor patch. Connected sources corroborate the same vulnerability entry and remediation status.

5.4CVSS6.6AI score0.00196EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/11/13 7:43 a.m.•11 views

CVE-2025-12633

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

7.5CVSS5.3AI score0.00257EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2025/11/13 2:38 a.m.•17 views

WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Booking Calendar versions = 10.14.7...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies•added 2025/11/13 12:00 a.m.•10 views

PT-2025-46814

Name of the Vulnerable Software and Affected Versions Booking Calendar versions through 10.14.7 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks. The affected...

5.6AI score0.00154EPSS
SaveExploits0References3
CNNVD
CNNVD•added 2025/11/13 12:00 a.m.•7 views

WordPress plugin Booking Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.7AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2025/11/13 12:00 a.m.•12 views

WordPress plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.4AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2025/11/13 12:00 a.m.•11 views

PT-2025-46797

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

7AI score0.00196EPSS
SaveExploits0References2
Patchstack
Patchstack•added 2025/11/12 9:36 a.m.•11 views

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Mika in WordPress Plugin Online Booking & Scheduling Calendar for WordPress by vcita versions = 4.5.5...

8.8CVSS7AI score0.00149EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2025/11/12 9:32 a.m.•15 views

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Online Booking & Scheduling Calendar for WordPress by vcita versions = 4.5.5...

5.4CVSS7AI score0.00248EPSS
SaveExploits0Affected Software1
EUVD
EUVD•added 2025/11/12 9:30 a.m.•12 views

EUVD-2025-119994

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

7.5CVSS4.9AI score0.00257EPSS
SaveExploits0References3
NVD
NVD•added 2025/11/12 8:15 a.m.•16 views

CVE-2025-12633

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

7.5CVSS0.00257EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2025/11/12 7:27 a.m.•6 views

CVE-2025-12633 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

7.5CVSS5AI score0.00257EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2025/11/12 7:27 a.m.•27 views

CVE-2025-12633 Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

7.5CVSS0.00257EPSS
SaveExploits0References2
Rows per page
Query Builder