Lucene search
+L

30 matches found

EUVD
EUVD
•added 2026/07/13 12:35 p.m.•17 views

EUVD-2026-43461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.44...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/13 10:16 a.m.•22 views

CVE-2026-57388

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.44...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•2 views

CVE-2026-57388: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.44...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•21 views

PT-2026-57700

Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions prior to 1.1.45 Description Stored Cross-site Scripting XSS occurs due to improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts that are stored on the...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/05 7:16 p.m.•21 views

CVE-2026-42675

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

7.3CVSS5.4AI score0.00301EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/01 3:18 p.m.•27 views

EUVD-2026-33688

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

7.3CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/01 3:18 p.m.•47 views

CVE-2026-42675 WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

7.3CVSS0.00301EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•45 views

PT-2026-45462

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

7.3CVSS5.8AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•2 views

CVE-2026-42675: Missing Authorization

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

7.3CVSS5.9AI score0.00301EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•26 views

EUVD-2026-20195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

5.9AI score0.0024EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•15 views

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

5.9CVSS0.0024EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2026-39541: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

5.9CVSS5.8AI score0.0024EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•15 views

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS5.4AI score0.00325EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS0.00325EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•5 views

CVE-2025-68027

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS5.3AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•31 views

CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•15 views

PT-2026-4064

Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions through 1.1.32 Description A privilege assignment issue exists in Themefic Hydra Booking hydra-booking, potentially allowing privilege escalation. The issue allows for unauthorized access or actions due to...

7.3CVSS5.3AI score0.00325EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•0 views

CVE-2025-68027: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...

7.3CVSS5.8AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•25 views

PT-2025-51446

Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions through 1.1.32 Description The software contains a flaw due to improper neutralization of special elements within SQL commands, leading to a SQL Injection issue. This allows for potential manipulation of databas...

8.5CVSS7.4AI score0.00311EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•3 views

CVE-2025-68055: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through = 1.1.32...

8.5CVSS5.8AI score0.00311EPSS
SaveExploits1References1
Rows per page
Query Builder