Medium
CVE-2017-18555
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2017-2168
WP Booking System – Booking Calendar < 1.4 - Cross-Site Scripting
Medium
9d7cd3eb-3ab7-44b3-8568-ce145977dfab
WordPress Appointment Schedule Booking System <=1.0 - Stored Cross-Site Scripting
High
ef9d256b-9156-4172-8892-29a26beddb71
Booking Calendar <= 6.2 - Authenticated (Editor+) SQL Injection
High
e865324e-a2a2-40fb-8c6a-a89317b59c8c
Booking Calendar <= 6.2 - Cross-Site Request Forgery to SQL Injection
High
6f36d866-aa94-478b-8b62-0906bc95e413
Booking Calendar <= 6.2 - Cross-Site Request Forgery leading to Cross-Site Scripting
High
CVE-2016-20068
Booking Calendar Contact Form <= 1.0.23 - Shortcode SQL Injection
Critical
CVE-2016-10909
Booking Calendar Contact Form < 1.0.24 - Blind SQL Injection
Medium
CVE-2016-10908
Booking Calendar Contact Form <= 1.0.23 - Reflected Cross-Site Scripting
Critical
4d79df74-bb28-412b-bba1-9f8a40ae981d
Appointment Booking Calendar <= 1.2.24 - SQL Injection
High
13c9a71f-ec0a-4d4a-be08-787aa22a0fae
Appointment Booking Calendar <= 1.2.24 - Cross-Site Scripting
Critical
CVE-2016-10916
Appointment Booking Calendar <= 1.1.23 - SQL Injection
Critical
CVE-2015-7319
Appointment Booking Calendar <= 1.1.7 - SQL Injection
Medium
CVE-2015-7320
Appointment Booking Calendar <= 1.1.7 - Multiple Reflected Cross-Site Scripting
Critical
CVE-2015-1000009
Google Adsense and Hotel Booking <= 1.05 - Open Proxy
Critical
CVE-2015-9298
Events Manager <= 5.5.7.1 - Code Injection
Medium
CVE-2015-9297
Events Manager <= 5.5.7.1 - Cross-Site Scripting
High
CVE-2015-9460
Pinpoint Booking System – #1 WordPress Booking Plugin < 2.1 - Authenticated SQL Injection
Medium
CVE-2015-9299
Events Manager < 5.5.7.1 - Cross-Site Scripting
Medium
CVE-2015-9300
Events Manager < 5.5.7 - Cross-Site Scripting
Medium
f0b25726-0b8e-4fce-a986-5f1e176da75a
Booking Calendar < 4.1.6 - Cross-Site Request Forgery
Medium
CVE-2013-7477
Events Manager <= 5.5.1 - Multiple Cross-Site Scripting
Medium
CVE-2013-7479
Events Manager < 5.3.9 - Cross-Site Scripting
Medium
CVE-2013-1407
Events Manager < 5.3.5 & Events Manager Pro < 2.2.9 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.