Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total22

Critical0

High3

Medium18

Search Severity Year Type Sort Order

Reset

Showing 21-22 of 22 records

Threat Entry Updated 2026-06-17

Booking - Cross-Site Request Forgery (CSRF) (CVE-2022-33177)

Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin

PLUGIN Booking

CVE-2022-33177

MEDIUM CVSS 5.4 2022-09-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

PLUGIN Booking

CVE-2019-15774

MEDIUM CVSS 6.1 2019-08-29

Risk Score

Open Full Technical Breakdown

WordPress security that blocks attacks before they land.