High
CVE-2025-1770
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2025-1766
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
Critical
CVE-2024-13442
Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2024-13412
CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler
Critical
CVE-2024-13410
CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler
Critical
CVE-2025-1771
Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
Medium
CVE-2025-1773
Traveler <= 3.1.8 - Reflected Cross-Site Scripting
High
CVE-2025-1119
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-13431
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting
High
CVE-2025-0959
Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id
Medium
CVE-2024-13526
EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export
Medium
CVE-2024-13616
VikBooking Hotel Booking Engine & PMS <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9450
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.14 - Cross-Site Request Forgery
Medium
CVE-2024-13746
Booking Calendar and Notification <= 4.0.3 - Missing Authorization via wpcb_all_bookings, wpcb_update_booking_post, and wpcb_delete_posts Functions
High
CVE-2024-12811
Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-1249
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.4.1 - Missing Authorization
High
CVE-2025-26921
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-26964
Eventin <= 4.0.20 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-26965
Amelia <= 1.2.16 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-27345
Booking Ultra Pro <= 1.1.19 - Reflected Cross-Site Scripting
High
CVE-2025-27264
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-27263
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-11260
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
Medium
CVE-2024-13235
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.