Vulnerabilities

TI-2026-03084 CVE-2026-3576 · GHSA-jjq9-3x6f-75pj

Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

MEDIUM 49

The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.08808 Published 2026-07-11 No fix listed CWE-20

TI-2025-22948 CVE-2025-31811 · GHSA-9fr8-m4rq-565w

WordPress Planyo online reservation system plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtreeme Planyo online reservation system planyo-online-reservation-system allows Stored XSS.This issue affects Planyo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-01 No fix listed CWE-79

Vulnerabilities

Filters

Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

WordPress Planyo online reservation system plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability