Medium
CVE-2026-39541
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2026-39652
iGMS Direct Booking <= 1.3 - Missing Authorization
Medium
CVE-2026-32358
Booking Calendar <= 10.14.15 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-32354
WpEvently < 5.1.9 - Unauthenticated Information Exposure
Medium
CVE-2025-14873
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Cross-Site Request Forgery
Medium
CVE-2026-1932
Appointment Booking Calendar Plugin <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Appointment Status Modification
Medium
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
High
CVE-2026-22344
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2026-0845
WCFM - WooCommerce Frontend Manager <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update
High
CVE-2025-69328
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-32486
Travel Booking <= 1.3.9 - Missing Authorization
Medium
CVE-2025-68852
Court Reservation <= 1.10.8 - Reflected Cross-Site Scripting
High
CVE-2025-67988
CozyStay < 1.9.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0742
Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Action
High
CVE-2026-0617
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-39585
Booktics <= 1.0.16 - Missing Authorization
Medium
CVE-2026-1431
Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure
Medium
CVE-2025-68005
Easy Hotel Booking <= 1.8.4 - Missing Authorization
Critical
CVE-2026-22341
Booked <= 3.0.0 - Authentication Bypass
Medium
CVE-2026-25415
WPBookit Pro <= 1.6.18 - Missing Authorization
Medium
CVE-2026-24380
EventPrime <= 4.2.8.0 - Missing Authorization
Medium
CVE-2026-1083
Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration
Medium
CVE-2025-67970
Schedula <= 1.0 - Missing Authorization
Medium
CVE-2026-24367
Traveler < 3.2.8 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.