Medium
CVE-2022-4036
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2022-4034
Appointment Hour Booking <= 1.3.72 - CSV Injection
High
CVE-2022-4035
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
Critical
CVE-2022-3982
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-43487
Salon booking system <= 7.9 - Reflected Cross-Site Scripting
High
CVE-2022-3720
Event Monster <= 1.2.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-0421
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-41692
Appointment Hour Booking <= 1.3.71 - Missing Authorization
Medium
CVE-2022-43482
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
High
CVE-2022-3336
Event Monster – Event Management, Tickets Booking, Upcoming Event <= 1.1.20 - Cross-Site Request Forgery
High
84c4e3cc-1f7c-4ed9-9072-32f3e84419c9
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization
High
CVE-2021-36855
Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2021-36854
Booking Ultra Pro <= 1.1.8 - Stored Cross-Site Scripting
High
12d7a152-90cd-4c92-90c4-81c594e6c9ac
Booking Ultra Pro <= 1.1.5 - Missing Authorization
Medium
CVE-2022-33177
Booking Calendar <= 9.2.1 - Cross-Site Request Forgery
High
b56a5ff2-10cb-4eee-9409-7f8a22d00358
WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update
High
b49ae7fc-e860-4387-b596-12640ec7277f
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
High
CVE-2021-36852
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Medium
CVE-2022-1932
Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting
High
CVE-2022-1952
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC <= 1.1.15 - Arbitrary File Upload
Medium
CVE-2022-29443
Hotel Booking < 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-1710
Appointment Hour Booking <= 1.3.55 - Authenticated Stored Cross-Site Scripting
High
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Medium
CVE-2022-29449
Opal Hotel Room Booking plugin <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.