High
CVE-2025-68047
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Low
CVE-2025-67954
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2025-67963
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-68027
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Medium
CVE-2026-24568
Travel <= 11.1.0 - Missing Authorization
Critical
CVE-2025-67953
Booking Activities <= 1.16.44 - Unauthenticated Privilege Escalation
Medium
CVE-2025-12573
Bookingor <= 1.0.12 - Missing Authorization
Medium
CVE-2025-68518
Hoteller < 6.8.9 - Reflected Cross-Site Scripting
Medium
CVE-2025-69315
Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization
High
CVE-2026-22336
Directorist Booking <= 2.4.1 - Unauthenticated SQL Injection
Medium
CVE-2026-0820
RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Medium
CVE-2025-14075
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter
Medium
CVE-2025-14982
Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure
High
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Medium
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Medium
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Medium
CVE-2025-14146
Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-14657
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Medium
CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Medium
CVE-2025-14984
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2025-14352
Awesome Hotel Booking <= 1.0.3 - Incorrect Authorization to Unauthenticated Arbitrary Booking Modification
Medium
CVE-2025-5919
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
Medium
CVE-2025-11723
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-67917
Traveler <= 3.2.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.