Skip to content
OpenAdvisories

Vendor

xtreeme

2 known vulnerabilities.

Products

Planyo online reservation system 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-3576 Public exploit Scanner template

    Planyo online reservation system <= 3.0 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter

    The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. The ulap.php file acts as an AJAX proxy and is directly accessible without WordPr…

    xtreeme Planyo online reservation system Web / CMS