Medium
CVE-2026-15402
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2026-84906
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
Medium
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Medium
CVE-2026-84905
Eventin <= 4.1.23 - Missing Authorization
Medium
CVE-2026-86475
Appointment Hour Booking <= 1.5.94 - Unauthenticated Appointment Slot Capacity Bypass
Medium
CVE-2026-77705
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation
Medium
CVE-2026-87907
Rox Appointment Booking <= 1.2.7 - Unauthenticated Information Exposure
Medium
CVE-2026-87891
Rox Appointment Booking – Appointment Booking Scheduling Solution < 1.2.0 - Missing Authorization
Medium
CVE-2026-87896
Rox Appointment Booking <= 1.2.7 - Unauthenticated Information Exposure
Medium
CVE-2026-84907
Eventin <= 4.1.23 - Missing Authorization
Medium
CVE-2026-88995
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-87894
Rox Appointment Booking – Appointment Booking Scheduling Solution 1.0.9 - 1.2.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-86812
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System 3.0.10 - 3.0.17 - Missing Authorization
Medium
CVE-2026-62112
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-10148
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter
Medium
CVE-2026-11446
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
Medium
CVE-2026-62135
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.24 - Missing Authorization
Medium
CVE-2026-77689
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-87892
Rox Appointment Booking – Appointment Booking Scheduling Solution < 1.2.0 - Payment Bypass to Unauthenticated Arbitrary Booking Price and Payment Method Bypass
High
CVE-2026-81803
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1224 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2026-15398
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption
Medium
CVE-2026-11821
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
High
CVE-2026-15667
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
High
CVE-2026-15406
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.