High
CVE-2025-24661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2024-12370
WP Hotel Booking <= 2.1.5 - Missing Authorization
Medium
CVE-2025-23955
Xola <= 1.6 - Missing Authorization
Medium
CVE-2025-23653
Form To Online Booking <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-10799
Eventer <= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2025-23600
Send to a Friend Addon <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-23911
Solidres – Hotel booking plugin <= 0.9.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22720
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress <= 2.2.1 - Missing Authorization
Medium
CVE-2025-22719
VikAppointments Services Booking Calendar <= 1.2.16 - Cross-Site Request Forgery
Medium
CVE-2025-22737
WpTravelly <= 1.8.5 - Missing Authorization
Medium
CVE-2024-13329
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
High
CVE-2025-22785
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2024-13323
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Medium
CVE-2024-12412
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12400
Tour Master - Tour Booking, Travel, Hotel <= 5.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-12067
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 10.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-12462
YOGO Booking <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-49294
Bus Ticket Booking with Seat Reservation <= 5.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-12077
Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'
Medium
CVE-2024-43334
Multiple Themes by gavias <= Various Versions - Reflected Cross-Site Scripting
High
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
High
CVE-2024-12272
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-12032
Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.