Medium
CVE-2025-67472
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
High
CVE-2025-12633
Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
Medium
CVE-2025-12788
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass
Medium
CVE-2025-12787
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
High
CVE-2025-12399
Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-12498
EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation
Medium
CVE-2025-64371
Traveler < 3.2.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-49918
VikBooking Hotel Booking Engine & PMS <= 1.8.2 - Unauthenticated Information Exposure
Medium
CVE-2025-64372
Traveler < 3.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-63028
Traveler <= 3.2.6 - Missing Authorization
Medium
CVE-2025-12042
Course Booking System <= 6.1.5 - Missing Authorization to Unauthenticated Booking Data Export
Medium
CVE-2025-63006
EventPrime <= 4.2.4.1 - Missing Authorization
Medium
CVE-2025-63007
EventPrime <= 4.2.4.1 - Authenticated (Subscriber+) Information Exposure
High
CVE-2025-64373
Traveler < 3.2.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-63011
Hotel Booking <= 2.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-63013
Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure
Medium
CVE-2025-63012
Hotel Booking <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2025-64275
Booking Manager <= 2.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49904
Booking and Rental Manager <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-6574
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
High
CVE-2025-5949
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
Medium
CVE-2025-8413
Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode
Medium
CVE-2025-5803
VikBooking Hotel Booking Engine & PMS <= 1.8.2 - Missing Authorization
High
CVE-2025-62035
Togo < 1.0.4 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.