Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filtersWP Simple Booking Calendar <= 2.0.13 - Missing Authorization
BMA Lite <= 1.4.2 - Authenticated (Administrator+) SQL Injection
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Tourmaster < 5.4.1 - Reflected Cross-Site Scripting
Course Booking System <= 6.1.2 - Reflected Cross-Site Scripting
TuriTop Booking System <= 1.0.11 - Authenticated (Subscriber+) PHP Object Injection
Booking and Rental Manager <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
WpBookingly <= 1.3.1 - Unauthenticated PHP Object Injection
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
Salon booking system <= 10.29.6 - Missing Authorization
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
Bookingor <= 2.0.1 - Missing Authorization
eaSYNC <= 1.3.19 - Missing Authorization
Course Booking System <= 6.1 - Missing Authorization
Booking Calendar and Notification <= 4.0.3 - Authentication Bypass
Booking Calendar and Notification <= 4.0.3 - Unauthenticated SQL Injection
TuriTop Booking System <= 1.0.17 - Missing Authorization
GetBookingsWP <= 1.1.27 - Missing Authorization
Awesome Event Booking <= 2.8.4 - Reflected Cross-Site Scripting
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
WpTravelly <= 1.8.7 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.