Medium
CVE-2026-89008
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Medium
CVE-2026-89007
Bookit <= 2.6.0.4 - Missing Authorization
Medium
CVE-2026-88995
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-84767
Bookit — Booking & Appointment Calendar <= 2.6.0.3 - Missing Authorization
Medium
CVE-2026-40780
Bookit — Booking & Appointment Calendar <= 2.5.1 - Missing Authorization
Medium
CVE-2026-25414
WPBookit Pro <= 1.6.18 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-25413
WPBookit Pro <= 1.6.18 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-1945
WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters
Medium
CVE-2026-1980
WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure
Medium
CVE-2026-25415
WPBookit Pro <= 1.6.18 - Missing Authorization
Medium
CVE-2025-12685
WPBookit <= 1.0.7 - Cross-Site Request Forgery to Customer Deletion
High
CVE-2025-12135
WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-12841
Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2025-12633
Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
Critical
CVE-2025-7852
WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
High
CVE-2025-6057
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-6058
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-3811
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update
Critical
CVE-2025-3810
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2025-32254
WPBookit <= 1.0.7 - Missing Authorization
Medium
CVE-2025-26910
WPBookit <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-0357
WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-10215
WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change
High
CVE-2024-54280
WPBookit <= 1.6.0 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.