Media
CVE-2026-15402
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.329
Restablecer filtros
Media
CVE-2026-84906
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
Media
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-84905
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-86475
Appointment Hour Booking <= 1.5.94 - Unauthenticated Appointment Slot Capacity Bypass
Media
CVE-2026-77705
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation
Media
CVE-2026-87907
Rox Appointment Booking <= 1.2.7 - Unauthenticated Information Exposure
Media
CVE-2026-87891
Rox Appointment Booking – Appointment Booking Scheduling Solution < 1.2.0 - Missing Authorization
Media
CVE-2026-87896
Rox Appointment Booking <= 1.2.7 - Unauthenticated Information Exposure
Media
CVE-2026-84907
Eventin <= 4.1.23 - Missing Authorization
Media
CVE-2026-88995
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure
Media
CVE-2026-87894
Rox Appointment Booking – Appointment Booking Scheduling Solution 1.0.9 - 1.2.2 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2026-86812
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System 3.0.10 - 3.0.17 - Missing Authorization
Media
CVE-2026-62112
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection
Media
CVE-2026-10148
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter
Media
CVE-2026-11446
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
Media
CVE-2026-62135
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.24 - Missing Authorization
Media
CVE-2026-77689
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass
Media
CVE-2026-87892
Rox Appointment Booking – Appointment Booking Scheduling Solution < 1.2.0 - Payment Bypass to Unauthenticated Arbitrary Booking Price and Payment Method Bypass
Alta
CVE-2026-81803
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1224 - Authenticated (Subscriber+) Remote Code Execution
Media
CVE-2026-15398
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption
Media
CVE-2026-11821
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
Alta
CVE-2026-15667
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
Alta
CVE-2026-15406
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.