Media
CVE-2026-62063
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.329
Restablecer filtros
Alta
CVE-2026-96573
Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
Crítica
CVE-2026-92966
Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field
Media
CVE-2026-91109
Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter
Media
CVE-2026-96886
Course Booking System <= 7.0.8 - Unauthenticated Information Exposure
Alta
CVE-2026-97248
Booking Activities <= 1.18.7.1 - Unauthenticated PHP Object Injection
Media
CVE-2026-86837
Bookly <= 28.2 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-86839
Bookly <= 28.2 - Authenticated (Staff+) Insecure Direct Object Reference
Alta
CVE-2026-86841
Bookly 23.2 - 28.2 - Authenticated (Bookly Administrator+) PHP Object Injection
Media
CVE-2026-86838
Bookly <= 28.2 - Unauthenticated Payment Bypass
Crítica
CVE-2026-93399
Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter
Media
CVE-2026-92799
Online Scheduling and Appointment Booking System <= 28.2 - Unauthenticated Authorization Bypass via PHP Type Juggling via 'verification_code' Parameter Type Juggling via json_data
Alta
CVE-2026-96039
BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter
Media
CVE-2026-97079
Appointment Booking Plugin & Scheduling System – Webba Booking Calendar <= 6.5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2026-96347
Online Scheduling and Appointment Booking System – Bookly <= 28.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2026-96348
Online Scheduling and Appointment Booking System – Bookly <= 28.2 - Missing Authorization
Media
CVE-2026-95513
Online Booking & Scheduling Calendar by vcita <= 4.6.0 - Missing Authorization
Media
CVE-2026-93661
Events Manager <= 7.4.4 - Authenticated (Contributor+) Insecure Direct Object Reference
Media
CVE-2026-93662
Events Manager 7.4.1 - 7.4.4 - Authenticated (Subscriber+) Information Exposure
Alta
CVE-2026-9231
WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute
Media
CVE-2026-93655
Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter
Media
CVE-2026-91024
Booking Manager <= 2.1.20 - Authenticated (Author+) SQL Injection
Media
CVE-2026-91077
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Missing Authorization
Media
CVE-2026-91025
Booking Manager <= 2.1.20 - Authenticated (Subscriber+) Insecure Direct Object Reference
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.