Średnia
CVE-2026-73395
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 66
Wyczyść filtry
Wysoka
CVE-2026-14334
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-8840
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action
Średnia
CVE-2026-57778
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization
Średnia
CVE-2026-12113
Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
Średnia
CVE-2026-12111
Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
Średnia
CVE-2016-20070
Booking Calendar Contact Form <= 1.0.23 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Wysoka
CVE-2016-20084
Booking Calendar Contact Form <= 1.1.24 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2026-6810
Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover
Wysoka
CVE-2026-25435
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting
Średnia
CVE-2025-67574
Booking calendar, Appointment Booking System <= 3.2.30 - Missing Authorization
Średnia
CVE-2025-13318
Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter
Średnia
CVE-2025-13317
Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
Średnia
CVE-2025-64261
Appointment Booking Calendar <= 1.3.95 - Missing Authorization
Średnia
CVE-2026-15289
Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'
Średnia
CVE-2025-48231
Booking Calendar Contact Form <= 1.2.58 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Średnia
CVE-2025-46247
Appointment Booking Calendar <= 1.3.92 - Missing Authorization
Średnia
CVE-2025-46241
Appointment Booking Calendar <= 1.3.92 - Cross-Site Request Forgery to SQL Injection
Średnia
CVE-2025-39541
WP Simple Booking Calendar <= 2.0.13 - Missing Authorization
Krytyczna
CVE-2025-31381
Booking Calendar and Notification <= 4.0.3 - Authentication Bypass
Wysoka
CVE-2025-31403
Booking Calendar and Notification <= 4.0.3 - Unauthenticated SQL Injection
Średnia
CVE-2024-13746
Booking Calendar and Notification <= 4.0.3 - Missing Authorization via wpcb_all_bookings, wpcb_update_booking_post, and wpcb_delete_posts Functions
Średnia
CVE-2025-24723
Booking Calendar Contact Form <= 1.2.55 - Authenticated (Administrator+) Stored Cross-Site Scripting
Średnia
CVE-2024-12077
Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.