7818 matches found
CVE-2025-22785
CVE-2025-22785 Course Booking System = 6.0.5 - SQL Injection non autenticata Descrizione Il plugin Course Booking System per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 6.0.5 inclusa a causa di un insufficiente escaping sul parametro fornito dall'utente e della mancanza di un...
CVE-2025-29448
CVE-2025-29448 Descrição falha na lógica de agendamento no Easy!Appointments v1.5.1 permite que atacantes não autenticados criem compromissos com durações excessivamente longas, causando uma negação de serviço ao bloquear toda a disponibilidade futura de agendamentos. Passos para Reproduzir 1...
CVE-2026-78258
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
EUVD-2026-64833
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-78258 WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Booking and Rental Manager versions = 2.7.5...
PT-2026-81051
Name of the Vulnerable Software and Affected Versions Booking Hub versions 1.3.0 and earlier Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update Booking Hub to a version later than 1.3.0...
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload vulnerability
Unauthenticated Stored XSS via SVG File Upload vulnerability discovered by Samdup Choephel in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.36...
CVE-2026-73402
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
CVE-2026-68566
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-73402 WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
EUVD-2026-63310
Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...
EUVD-2026-63309
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-68566 WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-73402
WP BASE Booking (a WordPress plugin for managing appointments, services, and events) versions ≤ 6.3.2 are affected by a Subscriber Cross-Site Scripting (XSS) vulnerability. The flaw requires low privileges and user interaction , with a changed scope indicating cross-origin impact. CVSS 3.1 base s...
WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability
WordPress Salon Booking System - Free Version plugin 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions 10.30.34...
CVE-2026-73363
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...
CVE-2026-73363 WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...
CVE-2026-73363
CVE-2026-73363 is an unauthenticated Broken Access Control vulnerability in the WordPress plugin Taxi Booking Manager for WooCommerce (plugin slug: ecab-taxi-booking-manager ), affecting versions prior to 2.0.8 . The flaw allows a low-privileged user to perform unauthorized actions, resulting in ...