Hoch
CVE-2025-68047
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 1.329
Filter zurücksetzen
Niedrig
CVE-2025-67954
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
Kritisch
CVE-2025-67963
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
Kritisch
CVE-2025-68027
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
Mittel
CVE-2026-24568
Travel <= 11.1.0 - Missing Authorization
Kritisch
CVE-2025-67953
Booking Activities <= 1.16.44 - Unauthenticated Privilege Escalation
Mittel
CVE-2025-12573
Bookingor <= 1.0.12 - Missing Authorization
Mittel
CVE-2025-68518
Hoteller < 6.8.9 - Reflected Cross-Site Scripting
Mittel
CVE-2025-69315
Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization
Hoch
CVE-2026-22336
Directorist Booking <= 2.4.1 - Unauthenticated SQL Injection
Mittel
CVE-2026-0820
RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Mittel
CVE-2025-14075
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter
Mittel
CVE-2025-14982
Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure
Hoch
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Mittel
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Mittel
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Mittel
CVE-2025-14146
Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure
Hoch
CVE-2025-14657
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Mittel
CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Mittel
CVE-2025-14984
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Mittel
CVE-2025-14352
Awesome Hotel Booking <= 1.0.3 - Incorrect Authorization to Unauthenticated Arbitrary Booking Modification
Mittel
CVE-2025-5919
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
Mittel
CVE-2025-11723
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure
Mittel
CVE-2025-67917
Traveler <= 3.2.6 - Missing Authorization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.