Advisories · Technology
themefic Hydra Booking — Appointment Scheduling & Booking Calendar.
Every CVE that names themefic Hydra Booking — Appointment Scheduling & Booking Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter
- themefic Hydra Booking — Appointment Scheduling & Booking Calendar
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameter
- themefic Hydra Booking — Appointment Scheduling & Booking Calendar
- Broken access control
- CVSS 5.3 Medium
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass
- themefic Hydra Booking — Appointment Scheduling & Booking Calendar
- CWE-602
- CVSS 5.3 Medium
Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Genera…
- themefic Hydra Booking — Appointment Scheduling & Booking Calendar
- Weak cryptography or TLS