agentprime: themefic-hydra-booking-appointment-scheduling-booking-calendarEvery new CVE for themefic-hydra-booking-appointment-scheduling-booking-calendar.https://agentprime.io/CVE-2026-15948: Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameterhttps://agentprime.io/advisories/CVE-2026-15948/https://agentprime.io/advisories/CVE-2026-15948/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 03:25:58 GMTCVECVE-2026-12433: Hydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' Parameterhttps://agentprime.io/advisories/CVE-2026-12433/https://agentprime.io/advisories/CVE-2026-12433/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 08:31:35 GMTCVECVE-2025-12788: Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypasshttps://agentprime.io/advisories/CVE-2025-12788/https://agentprime.io/advisories/CVE-2025-12788/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Nov 2025 11:03:46 GMTCVECVE-2025-12787: Hydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Genera…https://agentprime.io/advisories/CVE-2025-12787/https://agentprime.io/advisories/CVE-2025-12787/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Nov 2025 11:03:45 GMTCVE