Plugin icon

Appointment Booking Calendar

appointment-booking-calendar

Vulnerabilities:

14

Last Updated:

August 11, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-30
Title
Appointment Booking Calendar < 1.4.03 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
Fixed in
Fixed in 1.4.03
CVSS
2.7 (low)
Published
2026-06-17
Title
Appointment Booking Calendar < 1.4.02 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
Fixed in
Fixed in 1.4.02
CVSS
2.7 (low)
Published
2025-11-21
Title
Appointment Booking Calendar < 1.3.97 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
Fixed in
Fixed in 1.3.97
CVSS
5.3 (medium)
Published
2025-11-15
Title
Appointment Booking Calendar < 1.3.96 - Missing Authorization
Fixed in
Fixed in 1.3.96
CVSS
4.3 (medium)
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Missing Authorization
Fixed in
Fixed in 1.3.93
CVSS
5.3 (medium)
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Cross-Site Request Forgery to SQL Injection
Fixed in
Fixed in 1.3.93
CVSS
6.5 (medium)
Published
2024-02-28
Title
Booking Calendar < 1.3.83 - CSRF appointment scheduling
Fixed in
Fixed in 1.3.83
CVSS
4.3 (medium)
Published
2022-10-30
Title
Appointment Booking Calendar < 1.3.70 - Feedback Submission via CSRF
Fixed in
Fixed in 1.3.70
CVSS
4.3 (medium)
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - CSV Injection
Fixed in
Fixed in 1.3.35
CVSS
6.1 (medium)
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.3.35
CVSS
6.5 (medium)
Published
2019-07-04
Title
Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS
Fixed in
Fixed in 1.3.19
CVSS
6.5 (medium)
Published
2016-01-27
Title
Appointment Booking Calendar < 1.1.25 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.1.25
CVSS
9.4 (critical)
Published
2016-01-25
Title
Appointment Booking Calendar < 1.1.24 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.1.24
CVSS
9.4 (critical)
Published
2015-09-26
Title
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
Fixed in
Fixed in 1.1.8
CVSS
8.3 (high)