High
CVE-2026-76586
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filters
High
CVE-2026-68566
BookingPress Appointment Booking Pro <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2026-9830
BookingPress Pro <= 5.7.2 - Missing Authorization Unauthenticated Information Exposure
High
CVE-2026-11823
BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter
High
CVE-2026-12378
BookingPress <= 1.5.5 - Unauthenticated PHP Object Injection
Critical
CVE-2026-6960
BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field
Medium
CVE-2025-31910
BookingPress <= 1.1.28 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24732
BookingPress <= 1.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11726
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-12274
BookingPress <= 1.1.22 - Unauthenticated File Export Download
Medium
CVE-2024-10540
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2024-7350
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
High
CVE-2024-6660
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
High
CVE-2024-6467
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Medium
CVE-2024-34799
BookingPress <= 1.0.82 - Missing Authorization to Appointment Time Alteration
Medium
CVE-2024-31296
BookingPress <= 1.0.81 - Authenticated (Customer+) Insecure Direct Object Reference
High
CVE-2024-3022
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-51405
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking
High
CVE-2023-50841
BookingPress <= 1.0.72 - Authenticated (Contributor+) SQL Injection
High
CVE-2023-6219
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-36507
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2022-4340
BookingPress <= 1.0.30 - Unauthenticated Insecure Direct Object Reference
Medium
574dd6d8-14df-47b8-bf03-28a3c02b73ec
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
Critical
CVE-2022-0739
BookingPress < 1.0.11 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.