High
CVE-2022-0478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Critical
CVE-2022-0658
CommonsBooking < 2.6.8 - Unauthenticated SQL Injection
Medium
e09e48db-f74a-4663-a724-24938a6c277c
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2022-0389
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting
Medium
CVE-2021-24965
Five Star Restaurant Reservations <= 2.4.7 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2021-25061
WP Booking System – Booking Calendar <= 2.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2021-25040
Booking Calendar <= 8.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2021-24680
WP Travel Engine <= 5.3.0 - Editor+ Stored Cross-Site Scripting
Medium
CVE-2021-20840
Booking Package <= 1.5.10 - Reflected Cross-Site Scripting
Medium
CVE-2021-24930
Bookly <= 20.3 - Staff Member Stored Cross-Site Scripting
Medium
ef7ef45a-612b-40ca-817d-05b3d29b2b05
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Missing Authorization
Medium
c63079af-6a22-4692-ab81-96e166a00c38
Event Manager and Tickets Selling Plugin for WooCommerce < 3.5.3 - Arbitrary Settings Change
High
CVE-2021-24835
WCFM - Frontend Manager for WooCommerce <= 6.5.11 - Customer/Subscriber+ SQL Injection
Medium
CVE-2021-24646
Booking.com Banner Creator <= 1.4.2 - Cross-Site Scripting
Medium
CVE-2021-24645
Booking.com Product Helper <= 1.0.1 - Cross-Site Scripting
High
ded73f27-6b3a-435a-861f-5e10938d6d1a
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.2.4 - Stored Cross-Site Scripting
Medium
CVE-2021-24712
Appointment Hour Booking <= 1.3.16 - Cross-Site Scripting
Medium
CVE-2021-24673
Appointment Hour Booking <= 1.3.15 Admin+ Stored Cross-Site Scripting
High
CVE-2021-24726
WP Simple Booking Calendar <= 2.0.6 - Authenticated SQL Injection
Medium
CVE-2021-24530
Alojapro Widget <= 1.1.15 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24555
Diary & Availability Calendar <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2021-24429
Salon booking system < 6.3.1 - Stored Cross-Site Scripting
Medium
CVE-2021-24318
Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Insecure Direct Object Reference
High
CVE-2021-24299
ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.