20082 matches found
EUVD-2026-59850
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
CVE-2026-12905
The CVE-2026-12905 entry concerns the Bookly WordPress plugin (up to version 27.7). Affected component is the Mobile Staff Cabinet API, specifically appointment() in Handler1_0.php. The vulnerability is an Insecure Direct Object Reference: attacker-supplied params[id] load appointments without ve...
CVE-2026-12905 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...
GHSA-H84G-69H7-MW6V vulnerabilities
Vulnerabilities for packages: debezium...
MINI-FJ87-W8HF-FJPG
Bulletin has no description...
MINI-752G-W5MF-G56Q
Bulletin has no description...
PT-2026-73132
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
Exploit for CVE-2026-9830
CVE-2026-9830 BookingPress Pro API Assessment PoC This reposi...
MINI-8RQ8-MF63-PPJW
Bulletin has no description...
MINI-QR54-9J4M-H8MG
Bulletin has no description...
MINI-MPWC-JRFW-F3MJ
Bulletin has no description...
MINI-QXFQ-JG4J-3526
Bulletin has no description...
MINI-WRRM-9F45-R9HH
Bulletin has no description...
MINI-2398-3WG6-H27P
Bulletin has no description...
MINI-25MR-QQMC-RQXM
Bulletin has no description...
MINI-2F5P-6G7P-JPQF
Bulletin has no description...
MINI-7R3W-WRMC-F54Q
Bulletin has no description...
MINI-R2G5-4QWH-4WF2
Bulletin has no description...