Medium
CVE-2025-67915
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2025-68044
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-69341
WeDesignTech Ultimate Booking Addon <= 1.0.3 - Missing Authorization
High
CVE-2026-22402
Triply <= 2.4.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-63001
Hotel Booking <= 3.8 - Missing Authorization
Medium
CVE-2025-68014
AweBooking <= 3.2.26 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69032
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68006
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-24954
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-69327
Car Rental Manager <= 1.0.9 - Missing Authorization
Medium
CVE-2025-68601
Five Star Restaurant Reservations <= 2.7.8 - Cross-Site Request Forgery
Medium
CVE-2025-68575
Wappointment <=2.7.2 - Missing Authorization
Medium
CVE-2025-11496
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68511
Gutenverse Form <= 2.3.1 - Missing Authorization
Medium
CVE-2025-68569
Time Slots Booking Form <= 1.2.39 - Missing Authorization
Medium
CVE-2025-13754
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-12976
Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
High
CVE-2025-14383
Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check
Medium
CVE-2025-67574
Booking calendar, Appointment Booking System <= 3.2.30 - Missing Authorization
Medium
CVE-2025-67581
TrueBooker <= 1.1.0 - Missing Authorization
Medium
CVE-2025-66530
Webba Booking <= 6.2.1 - Missing Authorization
Medium
CVE-2025-14065
Simple Bike Rental <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Booking Data Exposure
Medium
CVE-2025-12407
Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion
Medium
CVE-2025-12408
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.