Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 66
Reset filtersBooking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Multi-day Booking Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting
Appointment Booking Calendar <= 1.3.82 - Cross-Site Request Forgery
Booking calendar, Appointment Booking System <= 3.2.3 - Missing Authorization
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection
Booking Calendar Contact Form <= 1.2.40 - Reflected Cross-Site Scripting
Booking calendar, Appointment Booking System <= 3.2.6 - Authenticated (Administrator+) SQL Injection via *_selected
Booking Calendar Contact Form <= 1.2.34 - Cross-Site Request Forgery via cpdexbccf_feedback
Booking calendar, Appointment Booking System <= 3.2.3 - Cross-Site Request Forgery
Booking calendar, Appointment Booking System <= 3.2.3 - Unauthenticated Bypass Vulnerability
Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Advanced Booking Calendar <= 1.7.1 - Unauthenticated SQL Injection
Advanced Booking Calendar <= 1.7.1 - Cross Site Request Forgery
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
Advanced Booking Calendar <= 1.7.0 - Authenticated SQL Injection
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Advanced Booking Calendar <= 1.6.9 - Unauthenticated SQL Injection
WP Simple Booking Calendar <= 2.0.6 - Authenticated SQL Injection
Advanced Booking Calendar <= 1.6.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.