Skip to content
OpenAdvisories

Archive

11 July 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-3576 Public exploit Scanner template

    Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

    The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. The ulap.php file acts as an AJAX proxy and is directly accessible without WordPr…