Medium
CVE-2023-47525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-49758
WP Booking System <= 2.0.19.2 - Missing Authorization
Critical
CVE-2023-5991
Hotel Booking Lite <= 4.8.4 - Insufficient Path Validation to Unauthenticated Arbitrary File Deletion and Download
Medium
CVE-2023-49173
10to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2023-6219
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
High
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Medium
5124be64-6679-4dc5-8117-55c73ae91489
EventPrime – Modern Events Calendar, Bookings and Tickets <= 3.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47805
WPCafe <= 2.2.22 - Missing Authorization
Medium
CVE-2023-47787
WooCommerce Bookings <= 2.0.3 - Cross-Site Request Forgery
High
CVE-2023-30496
Bus Ticket Booking with Seat Reservation <= 5.2.5 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-5209
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-47224
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-2707
gAppointments <= 1.9.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4252
EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass
High
caa39613-aaf3-4e47-8866-8fda1f7fc15b
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
Critical
CVE-2023-5652
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Medium
CVE-2023-5799
WP Hotel Booking <= 2.0.8 - Insufficient Authorization to Unauthorized Post Deletion
Medium
CVE-2023-5651
WP Hotel Booking <= 2.0.7 - Missing Authorization to (Subscriber+) Arbitrary Post Deletion
Medium
CVE-2023-45649
Appointment Hour Booking <= 1.4.23 - Missing Authorization to Double Booking
Medium
CVE-2023-45637
EventPrime <= 3.1.5 - Reflected Cross-Site Scripting via 'event_id'
Medium
CVE-2023-5238
EventPrime < 3.2.0 - Reflected HTML Content Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.