Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32241

Vulnérabilités (CVE)

Guides publiés

143

Publiés ce mois-ci

Filtre par plugin

booking calendar

Effacer

LatePoint – Calendar Booking Plugin for Appointments and Events

CritiqueCVSS 9.8

CVE-2025-6715

Inclusion de fichier local (LFI), non authentifié, dans LatePoint – Calendar Booking Plugin for Appointments and Events (<= 5.1.93)

Plugin: LatePoint – Calendar Booking Plugin for Appointments and Events
Versions: <= 5.1.93
CVSS: 9.8/10
Correctif: 5.1.94

CSRF (Cross-Site Request Forgery) dans Advanced Booking & Appointment System – Webba Booking Calendar (<= 5.1.20)

Plugin: Advanced Booking & Appointment System – Webba Booking Calendar
Versions: <= 5.1.20
CVSS: 4.3/10
Correctif: 5.1.21

Défaut de contrôle d'accès dans Advanced Booking & Appointment System – Webba Booking Calendar (<= 5.1.20)

Plugin: Advanced Booking & Appointment System – Webba Booking Calendar
Versions: <= 5.1.20
CVSS: 5.3/10
Correctif: 5.1.22

XSS stocké, authentifié (Contributeur+), dans Events Manager – Calendar, Bookings, Tickets, and more! (<= 6.6.4.4)

Plugin: Events Manager – Calendar, Bookings, Tickets, and more!
Versions: <= 6.6.4.4
CVSS: 6.4/10
Correctif: 6.6.5

Injection SQL, non authentifié, dans Events Manager – Calendar, Bookings, Tickets, and more! (<= 6.6.4.4)

Plugin: Events Manager – Calendar, Bookings, Tickets, and more!
Versions: <= 6.6.4.4
CVSS: 7.5/10
Correctif: 6.6.5

XSS réfléchi dans Events Manager – Calendar, Bookings, Tickets, and more! (<= 6.6.4.4)

Plugin: Events Manager – Calendar, Bookings, Tickets, and more!
Versions: <= 6.6.4.4
CVSS: 6.1/10
Correctif: 6.6.5

Défaut de contrôle d'accès, non authentifié, dans Booking X – Appointment and Reservation Availability Calendar (1.0 - 1.1.2)

Plugin: Booking X – Appointment and Reservation Availability Calendar
Versions: 1.0 - 1.1.2
CVSS: 7.5/10
Correctif: Aucun

XSS stocké, authentifié (Abonné+), dans Booking Calendar Contact Form (<= 1.2.58)

Plugin: Booking Calendar Contact Form
Versions: <= 1.2.58
CVSS: 6.4/10
Correctif: 1.2.59

XSS réfléchi dans Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) (<= 4.0.28)

Plugin: Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
Versions: <= 4.0.28
CVSS: 6.1/10
Correctif: 4.0.29

XSS stocké, authentifié (Contributeur+), dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.8.30)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.8.30
CVSS: 6.4/10
Correctif: 1.6.8.32

Injection SQL, authentifié (Abonné+), dans Hydra Booking — Appointment Scheduling & Booking Calendar (<= 1.1.10)

Plugin: Hydra Booking — Appointment Scheduling & Booking Calendar
Versions: <= 1.1.10
CVSS: 6.5/10
Correctif: 1.1.11

Défaut de contrôle d'accès dans Hydra Booking — Appointment Scheduling & Booking Calendar (<= 1.1.9)

Plugin: Hydra Booking — Appointment Scheduling & Booking Calendar
Versions: <= 1.1.9
CVSS: 4.3/10
Correctif: 1.1.10

12 juin 2025

Lire

157 – 168 sur 422 articles