Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: rezgo Component: Rezgo Online Booking Clear all filters
TI-2024-35998 CVE-2024-53800 · GHSA-8w32-3h9r-m2h5

WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability

Priority HIGH 70

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in rezgo Rezgo rezgo allows PHP Local File Inclusion.This issue affects Rezgo: from n/a through <= 4.1…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00698 Published 2025-01-07 No fix listed CWE-98
TI-2022-01791 CVE-2022-1932 · GHSA-77hw-h7rw-p297

Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting

Priority LOW 28

The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0067 Published 2022-08-22 Fixed in 4.1.8 CWE-79