CVE-2025-31381

CVE-2025-31381 describes a Missing Authorization (authentication bypass) vulnerability in the Booking Calendar and Notification WordPress plugin, affecting versions up to 4.0.3. Primary documentation lists this as a Missing Authorization issue with a CVSS v3.1 base score of 6.5 (Network access, n...

CVE-2025-31403

CVE-2025-31403 targets Booking Calendar and Notification (WordPress plugin) with an SQL Injection vulnerability present up to version 4.0.3. The issue is caused by improper neutralization of elements used in an SQL command, enabling blind SQL injection. According to the CVE entry, the vulnerabili...

CVE-2025-31403 WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

CVE-2025-31403 WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

WordPress Tockify Events Calendar plugin <= 2.2.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Yudistira Arya in WordPress Plugin Tockify Events Calendar versions = 2.2.13...

WordPress plugin Online Booking & Scheduling Calendar by vcita 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress plugin Booking Calendar and Notification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

PT-2025-14999 · WordPress · Vcita Online Booking & Scheduling Calendar

Name of the Vulnerable Software and Affected Versions: vcita Online Booking & Scheduling Calendar for WordPress by vcita versions through 4.5.2 Description: The issue allows retrieval of embedded sensitive data due to the generation of error messages containing sensitive information...

PT-2025-14895 · Unknown · Shiptrack Booking Calendar/Notification

Name of the Vulnerable Software and Affected Versions: shiptrack Booking Calendar and Notification versions n/a through 4.0.3 Description: The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in an...

WordPress plugin Tockify Events Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-14892 · Unknown · Shiptrack Booking Calendar/Notification

Name of the Vulnerable Software and Affected Versions: shiptrack Booking Calendar and Notification versions n/a through 4.0.3 Description: The issue is related to a Missing Authorization vulnerability in the shiptrack Booking Calendar and Notification, allowing exploitation of incorrectly...

PT-2025-14957 · Unknown · Tockify Events Calendar

Name of the Vulnerable Software and Affected Versions: Tockify Events Calendar versions through 2.2.13 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker coul...

WordPress plugin Booking Calendar and Notification SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

[SECURITY] Fedora 40 Update: nextcloud-31.0.2-2.fc40

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

CVE-2025-31572

Cross-Site Request Forgery CSRF vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar dragon-calendar-free-version allows Cross Site Request Forgery.This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through = 1.1.3...

CVE-2025-31589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kibru Demeke Ethiopian Calendar ethiopian-calendar allows Stored XSS.This issue affects Ethiopian Calendar: from n/a through = 1.1.1...

CVE-2025-31462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar cgm-event-calendar allows Reflected XSS.This issue affects CGM Event Calendar: from n/a through = 0.8.5...

CVE-2025-31462 WordPress CGM Event Calendar <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar allows Reflected XSS. This issue affects CGM Event Calendar: from n/a through 0.8.5...

CVE-2025-31462

CVE-2025-31462 affects the CGM Event Calendar plugin for WordPress. The issue is a reflected XSS due to improper handling of user input during web page generation. Affected versions are CGM Event Calendar