Skip to contentThemefic Hydra Booking vulnerabilities
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion via IDORCVE-2026-924255.5 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking 1.1.0 - < 1.2.3 - Hydra Host+ Host Profile Takeover via IDORCVE-2026-924214.7 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking < 1.2.2 - Hydra Host+ Cross-Host Booking Deletion and Modification via IDORCVE-2026-924203.8 Low
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' ParameterCVE-2026-159486.4 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerabilityCVE-2026-281887.3 High
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.44 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-573887.1 High
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking <= 1.2.1 - Authenticated (Custom+) Insecure Direct Object Reference to Sensitive Information Exposure via 'booking_id' ParameterCVE-2026-124334.3 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerabilityCVE-2026-426757.3 High
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-395415.9 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerabilityCVE-2025-680277.3 High
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.32 - SQL Injection vulnerabilityCVE-2025-68055Public exploit8.5 High
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment BypassCVE-2025-127885.3 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generat…CVE-2025-127875.3 Medium
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.10 - SQL Injection vulnerabilityCVE-2025-493788.5 High
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerabilityCVE-2025-493776.3 Medium
- themefic hydra booking – all in one appointment booking system | appointment scheduling, booking calendar & woocommerce bookingsHydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback FunctionCVE-2025-76898.8 High
- themefic hydra bookingWordPress Hydra Booking plugin <= 1.1.10 - SQL Injection VulnerabilityCVE-2025-493238.5 High