Hydra Booking

hydra-booking · eklenti

Hydra Booking için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

14 bilinen açık

1 kayıt için istismar kodu yayımlanmış · son kayıt 15 Ağu 2026

Güvenlik açıkları

CVE-2025-7689
Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function
Yüksek 8.8
CVE-2025-68055
WordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerability
Yüksek 8.5
CVE-2025-49378
WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerability
Yüksek 8.5
CVE-2025-49323
WordPress Hydra Booking plugin <= 1.1.10 - SQL Injection Vulnerability
Yüksek 8.5
CVE-2026-28188
WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability
Yüksek 7.3
CVE-2026-42675
WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability
Yüksek 7.3
CVE-2025-68027
WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability
Yüksek 7.3
CVE-2026-57388
WordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerability
Yüksek 7.1
CVE-2026-15948
Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter
Orta 6.4
CVE-2025-49377
WordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability
Orta 6.3
CVE-2026-39541
WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability
Orta 5.9
CVE-2025-12788
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification
Orta 5.3
CVE-2025-12787
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Bo
Orta 5.3
CVE-2026-12433
Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameter
Orta 4.3

← Dizine dön