Medium
CVE-2026-107712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 88
Reset filters
High
CVE-2026-105070
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.7 - Unauthenticated Privilege Escalation
High
CVE-2026-94668
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-96886
Course Booking System <= 7.0.8 - Unauthenticated Information Exposure
Medium
CVE-2026-81793
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Missing Authorization
Medium
CVE-2026-12128
Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter
Medium
CVE-2026-11887
Salon Booking System <= 10.30.19 - Missing Authorization to Authenticated (Subscriber+) Booking Approval Bypass
Medium
CVE-2026-66453
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.30.26 - Missing Authorization
Medium
CVE-2026-17020
Salon Booking System – Free Version < 10.31.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure
Medium
CVE-2026-17021
Salon Booking System – Free Version <= 10.30.33 - Missing Authorization
Medium
CVE-2026-17022
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure
Medium
CVE-2026-15229
Pinpoint Booking System <= 2.9.9.7.1 - Missing Authorization to Unauthenticated Arbitrary Booking Price Manipulation
Medium
CVE-2026-17023
Salon Booking System – Free Version < 10.31.3 - Missing Authorization to Unauthenticated Google Calendar Connection Hijack
Medium
CVE-2026-15403
Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' Parameter
Medium
CVE-2026-8791
Booking System Trafft <= 1.0.17 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-14831
Easy Booking <= 3.4.0 - Unauthenticated Minimum Booking Bypass
High
CVE-2026-15070
Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter
Medium
CVE-2026-57367
WP Booking System – Booking Calendar Premium < 5.12.8.1 - Missing Authorization
High
CVE-2017-20243
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2026-42666
Salon Booking System – Free Version <= 10.30.25 - Missing Authorization
High
CVE-2026-6320
Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal
Medium
CVE-2026-40768
Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-68515
WP Booking System – Booking Calendar <= 2.0.19.12 - Unauthenticated Information Exposure
Medium
CVE-2026-39678
Pinpoint Booking System <= 2.9.9.6.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.