Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filtersCTHthemes CityBook < 2.3.4, TownHub < 1.0.6, EasyBook < 1.2.2 Themes - Authenticated Post Deleition via IDOR
Events Manager <= 5.9.5 - Authenticated Stored Cross-Site Scripting
ND Booking <= 2.4 - Unauthenticated Arbitrary Options Update
Appointment Hour Booking – WordPress Booking Plugin <= 1.1.45 - Cross-Site Scripting
Appointment Booking Calendar < 1.3.19 - Cross-Site Scripting
Online Lesson Booking <= 0.8.6 - Cross-Site Request Forgery
Online Lesson Booking <= 0.8.6 - Cross-Site Scripting
Event Management Tickets Booking By Event Monster Plugin < 1.0.6 - Cross-Site Scripting
WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery
Travel Booking WordPress Theme < 2.7.8.4 - Cross-Site Scripting
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Booking Calendar <= 8.4.3 - SQL injection
Service Finder - Provider and Business Listing Theme < 3.2 - Path Traversal
Events Manager <= 5.9.4 - Cross-Site Scripting
Booking calendar, Appointment Booking System < 2.2.3 - Unauthenticated Parameter Manipulation
Events Manager <= 5.8.1.3 - Stored Cross-Site Scripting
Events Manager <= 5.8.1.1 - Cross-Site Scripting
WordPress Online Booking and Scheduling Plugin – Bookly <= 14.5 - Cross-Site Scripting
Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Request Forgery
Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting
Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting
Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting
Clockwork SMS Plugins - Multiple Versions - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.