27940 matches found
CVE-2026-15094
WP Hotel Booking for WordPress, version up to 2.3.2, is vulnerable to Reflected Cross-Site Scripting via the check_in_date parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages executed when ...
CVE-2026-15094 WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
EUVD-2026-45143
The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2026-62203
creationtimestamp| type| source ---|---|--- 2026-07-17 02:58:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqydgkra2n...
CVE-2026-62215
creationtimestamp| type| source ---|---|--- 2026-07-17 02:49:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqgy4pt32i...
CVE-2026-59990
creationtimestamp| type| source ---|---|--- 2026-07-17 02:47:35+00:00| seen| https://bsky.app/profile/eed3si9n.com/post/3mqsqe4xchk2e...
[SECURITY] Fedora 44 Update: perl-HTTP-Date-6.08-1.fc44
This module provides functions that deal the date formats used by the HTTP protocol and then some more. Only the first two functions, time2str and str2time, are exported by default...
CVE-2026-62826
creationtimestamp| type| source ---|---|--- 2026-07-17 00:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqshealkar2l 2026-07-17 14:00:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y...
PT-2026-60717
Name of the Vulnerable Software and Affected Versions WP Hotel Booking versions prior to 2.3.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a link...
CVE-2026-14741: Inefficient Regular Expression Complexity
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...
CVE-2026-44174
creationtimestamp| type| source ---|---|--- 2026-07-16 23:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqseeoc45e2s...
CVE-2023-5968
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:22+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-17 00:00:39+00:00| seen| Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U 2026-07-18 00:00:11+00:00| published-proof-of-concept|...
CVE-2026-29114
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:12+00:00| seen| Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQlyCTvgM 2026-07-16 19:00:12+00:00| seen| Telegram/vkQwkXUL30u3pRsZtV-s7rMERa3mU1vbncFib7BaHrS3aA 2026-07-17 00:00:27+00:00| seen|...
CVE-2025-60357
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:06+00:00| seen| Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg 2026-07-16 19:00:06+00:00| seen| Telegram/IvSTlctOWtnn6SGIxP1ow0rL8sm88KiToGZPow6lWPATWQM 2026-07-17 00:00:10+00:00| published-proof-of-concept|...
CVE-2026-11989
creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:05+00:00| seen| Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qWApvUQ1Y 2026-07-17 00:00:25+00:00| published-proof-of-concept| Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qWApvUQ1Y...
MAL-2026-10731 Malicious code in date-utils-light (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd644fd9a59518d6f77e8d76c077ffef8a2afdc7ae2b00a6ca87299879a671 Package presents itself as a trivial date-formatting utility index.js exports a one-line ISO date helper but ships a postinstall.js that runs...
CVE-2026-57073
creationtimestamp| type| source ---|---|--- 2026-07-16 18:19:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqrtxj3mgv26 2026-07-17 13:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqtszn7bqc2y...
CVE-2026-59863
creationtimestamp| type| source ---|---|--- 2026-07-16 16:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqroonmn3q2m...