Critical
CVE-2024-25911
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Critical
CVE-2024-25910
MoveTo <= 6.2 - Unauthenticated SQL Injection
Critical
CVE-2024-25912
MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update
Critical
CVE-2024-25913
MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-1122
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export
Critical
CVE-2024-1207
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
Medium
86f15e94-6ca7-4eb2-8a38-b4add9251dab
WP Hotel Booking <= 2.0.9.2 - Improper Authorization on Multiple REST API Routes
Medium
CVE-2024-24832
EventPrime <= 3.3.9 - Improper Input Validation via save_event_booking
Medium
CVE-2024-24717
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
High
CVE-2024-24796
Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently <= 4.1.1 - Authenticated (Contributor+) PHP Object Injection in mep_event_meta_save
Medium
CVE-2024-23517
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-24407
Booking calendar, Appointment Booking System <= 3.2.3 - Missing Authorization
Medium
CVE-2023-6808
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-22298
Amelia <= 1.0.98 - Missing Authorization
Medium
CVE-2023-52228
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6447
EventPrime <= 3.3.5 - Missing Authorization to Private Event Disclosure
Medium
CVE-2023-51525
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery
High
CVE-2023-51405
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking
Medium
CVE-2023-51354
Webba Booking <= 4.5.33 - Cross-Site Request Forgery
Medium
CVE-2023-50860
Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode
High
CVE-2023-50841
BookingPress <= 1.0.72 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-50852
BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-50840
Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-50851
Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.