CVE-2024-3605

CVE-2024-3605 WP Hotel Booking = 2.1.0 - SQL Injection non autenticata Descrizione Il plugin WP Hotel Booking per WordPress è vulnerabile a SQL Injection tramite il parametro 'roomtype' dell'endpoint API REST /wphb/v1/rooms/search-rooms in tutte le versioni fino alla 2.1.0 inclusa, a causa di una...

CVE-2025-68055-poc

CVE-2025-68055 SQL injection autenticata nel plugin Hydra Booking get, Hydra Booking inserisce l'input utente direttamente nella richiesta SQL grezza invece di utilizzare prepare per sanitizzare l'input, portando a un'iniezione SQL cieca basata sul tempo. Exploit Un semplice comando di esecuzione...

CVE-2023-43147

CVE-2023-43147 Fornitore: PHPJabbers Homepage del fornitore: https://www.phpjabbers.com/ Link del software: https://www.phpjabbers.com/limo-booking-software Versione: 1.0 Testato su: Windows 10 Pro Impatto: Aggiunta di un utente attaccante con privilegi di amministratore CVE: La vulnerabilità Cro...

WordPress Booking for Appointments and Events Calendar plugin <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability

Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Amelia versions = 2.2...

CVE-2023-29809

Exploit Title: Unauthenticated SQL injection Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29809 Descrizione: La vulnerabilit...

CVE-2025-7753

🚨 CVE-2025-7753 — Exploit PoC di SQL Injection Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilità: SQL Injection non autenticata, basata sul tempo 🔍 Panoramica Una vulnerabilità critica di SQL Injection esiste in Online Appointment Booking System 1.0 Code‑Projects nel fil...

CVE-2024-1207

Booking Calendar = 9.9 - SQL Injection non autenticata CVE-2024-1207 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/booking/booking-calendar-99-unauthenticated-sql-injection POC: root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: vulnerablesite.com User-Agent:...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Salon booking system versions = 10.31.1...

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions = 10.31.1...

CVE-2026-78257

Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-78257 WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-78257

CVE-2026-78257 is a PHP Object Injection vulnerability in the WordPress plugin Booking and Rental Manager for WooCommerce (versions ≤ 2.7.5), discovered by daroo and rated CVSS 8.8 (High) by Patchstack. The flaw allows a user with Contributor privilege to exploit the injection over the network wi...

EUVD-2026-66992

Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-49083

CVE-2026-49083 CVE-2026-49083 LatePoint Calendar Booking Plugin Exploit di Escalation dei Privilegi 🎲🎲🎲...

CVE-2026-49083

CVE-2026-49083 CVE-2026-49083 استغلال تصعيد الامتيازات في إضافة LatePoint لحجوزات التقويم...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - Vulnerabilità di HTML injection nel sistema di prenotazione e prenotazione di eventi online versione 2.3.0. Descrizione tecnica: Esiste una vulnerabilità di HTML injection nel sistema di prenotazione e prenotazione di eventi online versione 2.3.0. Un attaccante può...

CVE-2024-57429

CVE-2024-57429 Uma vulnerabilidade de cross-site request forgery CSRF na função pjActionUpdate do PHPJabbers Cinema Booking System v2.0 permite que atacantes remotos elevem privilégios ao enganar um administrador autenticado para submeter uma requisição não autorizada. Impacto: A exploração desta...

CVE-2024-57428

CVE-2024-57428 Una vulnerabilità di cross-site scripting XSS memorizzato in PHPJabbers Cinema Booking System v2.0 esiste a causa dell'input non sanificato nei campi di caricamento file eventimg, seatmaps e nelle configurazioni dei numeri dei posti numbernewX in pjActionCreate. Gli attaccanti...

CVE-2025-25965

CVE-2025-25965: Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.2 Einleitung Cross-Site Request Forgery CSRF bleibt eine der am meisten übersehenen und dennoch gefährlichsten Schwachstellen, die moderne Webanwendungen betreffen. CVE-2025-25965 ist eine neu entdeckte...

CVE-2024-57430

CVE-2024-57430 Eine SQL-Injection-Schwachstelle in der Funktion pjActionGetUser des PHPJabbers Cinema Booking System v2.0 ermöglicht es Angreifern, Datenbankabfragen über den Parameter column zu manipulieren. Die Ausnutzung dieses Fehlers kann zu unbefugter Offenlegung von Informationen,...