Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filtersFastBook <= 1.1 - Reflected Cross-Site Scripting
Simply Schedule Appointments <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Hydra Booking <= 1.1.9 - Missing Authorization
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Hydra Booking <= 1.1.10 - Authenticated (Subscriber+) SQL Injection
CozyStay < 1.7.1 - Unauthenticated Local File Inclusion
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
CozyStay < 1.7.1 - Unauthenticated PHP Object Injection
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booking Ultra Pro <= 1.1.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Hydra Booking <= 1.1.10 - Authenticated (Contributor+) SQL Injection
FastBook <= 1.1 - Cross-Site Request Forgery
WP Travel Engine <= 6.5.1 - Authenticated (Contributor+) Local File Inclusion
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery
BRW <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
BRW <= 1.8.6 - Authenticated (Contributor+) Local File Inclusion
Soho Hotel <= 4.2.5 - Reflected Cross-Site Scripting
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure
ReDi Restaurant Reservation <= 24.1209 - Reflected Cross-Site Scripting
Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection
Booking and Rental Manager <= 2.3.8 - Missing Authorization
Tourmaster <= 5.3.8 - Unauthenticated Local File Inclusion
Multiple Themes by bslthemes <= Various Version - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.