Medium
CVE-2026-12956
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,329
Reset filters
Medium
CVE-2026-81793
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Missing Authorization
Medium
CVE-2026-81796
WP Travel – Ultimate Travel Booking System, Tour Management Engine <= 12.0.3 - Missing Authorization
Medium
CVE-2026-81802
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar <= 5.6.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-2520
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update
Medium
CVE-2026-13146
Travel <= 12.0.1 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-13144
Travel <= 12.0.1 - Missing Authorization
Medium
CVE-2026-18042
Travel <= 12.0.1 - Missing Authorization
Medium
CVE-2026-84901
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Missing Authorization
Medium
CVE-2026-84898
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Path Traversal
High
CVE-2026-15984
QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters
Medium
CVE-2026-27432
WP Rentals - Booking Accommodation WordPress Theme < 3.16.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-14945
Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes
High
CVE-2026-84768
VikAppointments Services Booking Calendar <= 1.2.20 - Unauthenticated SQL Injection
Medium
CVE-2026-85303
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84767
Bookit — Booking & Appointment Calendar <= 2.6.0.3 - Missing Authorization
Medium
CVE-2026-84766
Fluent Booking Pro <= 2.2.1 - Missing Authorization
Medium
CVE-2026-84215
Timetics – Appointment Booking Calendar & Scheduling <= 1.0.61 - Missing Authorization
Medium
CVE-2026-15232
MotoPress Appointment Booking < 2.4.8 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-84045
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation
Medium
CVE-2026-82223
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.22 - Missing Authorization
Medium
CVE-2026-81769
Booking Hub <= 1.3.1 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2026-9055
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
Medium
CVE-2026-14215
Booking for Appointments and Events Calendar – Amelia < 2.4.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.