Lucene search
+L

3 matches found

NVD
NVD
added 12 hours ago4 views

CVE-2026-8791

The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...

6.4CVSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 14 hours ago3 views

CVE-2026-8791

The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...

6.4CVSS6AI score
SaveExploits0References12Affected Software1
EUVD
EUVD
added 14 hours ago5 views

EUVD-2026-50273

The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bookingWebsiteUrl setting in all versions up to, and including, 1.0.17 due to a missing capability check on the setoptions AJAX action when the plugin is operating in agency mode. The...

6.4CVSS6AI score
SaveExploits0References11
Rows per page
Query Builder