Alta
CVE-2025-68047
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.329
Restablecer filtros
Baja
CVE-2025-67954
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
Crítica
CVE-2025-67963
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
Crítica
CVE-2025-68027
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Media
CVE-2026-24568
Travel <= 11.1.0 - Missing Authorization
Crítica
CVE-2025-67953
Booking Activities <= 1.16.44 - Unauthenticated Privilege Escalation
Media
CVE-2025-12573
Bookingor <= 1.0.12 - Missing Authorization
Media
CVE-2025-68518
Hoteller < 6.8.9 - Reflected Cross-Site Scripting
Media
CVE-2025-69315
Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization
Alta
CVE-2026-22336
Directorist Booking <= 2.4.1 - Unauthenticated SQL Injection
Media
CVE-2026-0820
RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Media
CVE-2025-14075
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter
Media
CVE-2025-14982
Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure
Alta
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Media
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Media
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Media
CVE-2025-14146
Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure
Alta
CVE-2025-14657
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Media
CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Media
CVE-2025-14984
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Media
CVE-2025-14352
Awesome Hotel Booking <= 1.0.3 - Incorrect Authorization to Unauthenticated Arbitrary Booking Modification
Media
CVE-2025-5919
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
Media
CVE-2025-11723
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure
Media
CVE-2025-67917
Traveler <= 3.2.6 - Missing Authorization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.