Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filtersAdvanced Booking Calendar <= 1.6.6 - Reflected Cross-Site Scripting via calId Parameter
WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass
Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Cross-Site Scripting
WP Hotel Booking <= 1.10.3 - Remote Code Execution
Good LMS <= 2.1.4 - Unauthenticated SQL Injection
Advanced Booking Calendar <= 1.6.1 - Unauthenticated SQL Injection
WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypass
Ultimate Appointment Booking & Scheduling < 1.1.10 - Reflected Cross-Site Scripting
Traveler – Travel Booking WordPress Theme < 2.8.4 - Cross-Site Scripting
Travel Booking WordPress Theme < 2.8.4 - SQL Injection
Travel Booking WordPress Theme < 2.8.2 - Cross-Site Scripting
Events Manager <= 5.9.7.3 - Cross-Site Scripting
Events Manager <= 5.9.7.3 - Admin+ SQL Injection
Online Hotel Booking System Pro <= 1.1 - Cross-Site Scripting
Appointment Booking Calendar <= 1.3.34 - CSV Injection
Appointment Booking Calendar <= 1.3.34 - Stored Cross-Site Scripting
Booked <= 2.2.5 - Missing Authorization on AJAX Actions
Events Manager < 5.9.7.2 & Events Manager Pro < 2.6.7.2 - Unauthenticated CSV Injection
Events Manager <= 5.9.7.1 - CSV Injection
Traveler – Travel Booking WordPress Theme < 2.7.8.6 - Cross-Site Scripting
Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
CTHthemes CityBook Theme < 2.3.4, TownHub Theme < 1.0.6, EasyBook Theme < 1.2.2 - Cross-Site Scripting
CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.