Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: shiptrack Clear all filters
TI-2025-22562 CVE-2025-31381 · GHSA-f653-w82j-53xf

WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Priority LOW 35

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Cale…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00332 Published 2025-04-04 No fix listed CWE-862
TI-2025-22584 CVE-2025-31403 · GHSA-27w9-h9rx-p7c5

WordPress Booking Calendar and Notification plugin <= 4.0.3 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Blind SQL Injection.This issue af…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00399 Published 2025-04-04 No fix listed CWE-89