Alta
CVE-2025-69130
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.329
Restablecer filtros
Media
CVE-2026-24638
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1121 - Missing Authorization
Media
CVE-2026-25426
E-cab Taxi Booking Manager for Woocommerce <= 2.0.1 - Missing Authorization
Media
CVE-2026-27331
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.5 - Missing Authorization
Alta
CVE-2026-42687
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Unauthenticated PHP Object Injection
Media
CVE-2026-42686
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2026-8684
MotoPress Hotel Booking <= 6.0.1 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action
Crítica
CVE-2026-6960
BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field
Media
CVE-2026-27405
Appointment Booking Plugin for WooCommerce – WpBookingly | All-in-One Service Manager <= 1.2.9 - Missing Authorization
Alta
CVE-2026-42683
VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting
Media
CVE-2026-42675
Hydra Booking — Appointment Scheduling & Booking Calendar <= 1.1.41 - Missing Authorization
Media
CVE-2026-5365
LatePoint <= 5.3.2 - Cross-Site Request Forgery via 'customer_cabinet__request_cancellation' AJAX Route
Alta
CVE-2026-1250
Court Reservation – Manage Your Court Bookings Online <= 1.10.11 - Unauthenticated SQL Injection
Media
CVE-2026-42669
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.2.0 - Missing Authorization
Media
CVE-2026-42670
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.14 - Missing Authorization
Media
CVE-2026-5693
Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation
Media
CVE-2026-42666
Salon Booking System – Free Version <= 10.30.25 - Missing Authorization
Media
CVE-2026-42667
Online Scheduling and Appointment Booking System – Bookly <= 27.4 - Unauthenticated Information Exposure
Media
CVE-2026-45218
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 11.4.0 - Authenticated (Contributor+) SQL Injection
Media
CVE-2026-7652
LatePoint <= 5.5.0 - Unauthenticated Account Takeover via Weak Password Recovery Mechanism
Media
CVE-2025-66105
Bus Ticket Booking with Seat Reservation < 5.6.8 - Missing Authorization
Media
CVE-2026-4807
Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion
Alta
CVE-2026-7448
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2026-1719
Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.