High
CVE-2026-8789
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2026-59548
Byteflows Travel & Hotel Booking <= 1.0.0 - Unauthenticated Information Exposure
Medium
CVE-2026-65514
Appointment Hour Booking – Booking Calendar <= 1.5.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-59532
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation
High
CVE-2026-65466
JetBooking <= 4.1.2 - Authenticated (Custom+) Server-Side Request Forgery
Medium
CVE-2026-27377
QuickCal <= 1.0.16 - Missing Authorization
Medium
CVE-2026-16063
Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2026-59541
WP BASE Booking of Appointments, Services and Events <= 6.3.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-65468
JetBooking <= 4.1.2 - Missing Authorization
Medium
CVE-2026-15149
Hotel Booking <= 2.3.2 - Unauthenticated Price Manipulation
Medium
CVE-2026-15147
Five Star Restaurant Reservations <= 2.7.22 - Unauthenticated Insecure Direct Object Reference to Payment Bypass
Critical
CVE-2026-61951
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated Privilege Escalation
Medium
CVE-2026-15094
WP Hotel Booking <= 2.3.2 - Reflected Cross-Site Scripting via 'check_in_date' Parameter
Medium
CVE-2026-14782
Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import
High
CVE-2026-61949
Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Unauthenticated SQL Injection
High
CVE-2026-61950
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection
High
CVE-2026-61944
Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14831
Easy Booking <= 3.4.0 - Unauthenticated Minimum Booking Bypass
Medium
CVE-2026-12501
Travel Engine <= 6.8.1 - Unauthenticated Payment Bypass
Medium
CVE-2026-11901
WP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler
Medium
CVE-2026-3367
Lockme OAuth2 calendars integration <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'App ID' Setting
High
CVE-2026-15335
Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter
Medium
CVE-2026-15250
LatePoint <= 5.6.7 - Missing Authorization to Unauthenticated Booking Object Mass Assignment
Medium
CVE-2026-12924
Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.