Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Hydra Booking — Appointment Scheduling & Booking Calendar — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Hydra Booking — Appointment Scheduling & Booking Calendar, with AI-generated Chinese analysis, references, and POCs.

Vendor: themefic

CVE IDTitleCVSSSeverityPublished
CVE-2026-15948 Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter CWE-79 6.4 Medium2026-08-15
CVE-2026-12433 Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameter CWE-639 4.3 Medium2026-07-09
CVE-2025-12788 Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass CWE-602 5.3 Medium2025-11-11
CVE-2025-12787 Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation CWE-330 5.3 Medium2025-11-11

All 4 known CVE vulnerabilities affecting Hydra Booking — Appointment Scheduling & Booking Calendar with full Chinese analysis, references, and POCs where available.