Medium
CVE-2024-6033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2024-3636
Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-38737
ReDi Restaurant Reservation <= 24.0422 - Missing Authorization
Critical
CVE-2024-38717
Booking Ultra Pro <= 1.1.13 - Unauthenticated Local File Inclusion
Medium
CVE-2024-38676
Booking Ultra Pro <= 1.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-37944
WP Travel Engine <= 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-37513
WPCafe <= 2.2.27 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-37507
Eventin <= 3.3.57 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-37499
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-5889
Events Manager <= 6.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-37262
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Reflected Cross-Site Scripting
High
CVE-2024-5431
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
High
CVE-2024-5791
Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-5859
Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-6225
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2024-3605
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
Medium
CVE-2024-5059
Event Management Tickets Booking <= 1.4.3 - Unauthenticated Information Exposure
Critical
CVE-2024-3229
Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-1634
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
High
CVE-2024-1094
Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation
Medium
CVE-2024-3492
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
Medium
CVE-2024-5584
WordPress Online Booking and Scheduling Plugin – Bookly <= 23.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter
Medium
CVE-2024-4468
Salon booking system <= 9.9 - Missing Authorization
Medium
CVE-2024-35735
WP Time Slots Booking Form <= 1.2.11 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.