High
CVE-2026-5513
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
High
CVE-2026-27400
BookPro <= 1.1.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-9576
Fluent Booking <= 2.1.1 - Authenticated (Calendar Manager+) Information Exposure
High
CVE-2017-20243
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2026-49073
Booking (Reservation & Appointment) <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-9851
Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action
Medium
CVE-2026-9719
LatePoint <= 5.6.0 - Cross-Site Request Forgery via invoices__change_status Action
High
CVE-2026-49083
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.5.1 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2026-8608
Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action
Medium
CVE-2026-49078
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.10 - Missing Authorization
High
CVE-2026-49770
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.7.12 - Unauthenticated PHP Object Injection
High
CVE-2026-48889
Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-48881
TrueBooker – Appointment Booking and Scheduler System <= 1.1.9 - Missing Authorization
Medium
CVE-2026-48882
WP Time Slots Booking Form <= 1.2.50 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-27089
Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Solution <= 2.1.7 - Missing Authorization
High
CVE-2026-42762
VikBooking Hotel Booking Engine & PMS <= 1.8.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-42751
Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-39447
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6937
Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint
High
CVE-2026-7797
Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Critical
CVE-2026-42737
VikBooking Hotel Booking Engine & PMS <= 1.8.10 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-7493
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service
Medium
CVE-2026-45441
Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization
Medium
CVE-2026-25444
Appointment Booking Plugin for WooCommerce – WpBookingly | All-in-One Service Manager <= 1.2.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.