WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
appmysite
Published
2023-12-04
Title
AppMySite < 3.11.1 - Unauthenticated Information Disclsoure
Slug
appmysite
Published
2025-09-22
Title
AppMySite <= 3.14.0 - Missing Authorization
Slug
appointify
Published
2025-03-31
Title
Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload
Slug
appointify
Published
2025-12-30
Title
Appointify <= 1.0.8 - Authenticated (Administrator+) SQL Injection
Slug
appointify
Published
2025-12-31
Title
Appointify <= 1.0.8 - Cross-Site Request Forgery
Slug
appointment-booking-calendar
Published
2015-09-26
Title
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
Slug
appointment-booking-calendar
Published
2016-01-25
Title
Appointment Booking Calendar < 1.1.24 - Unauthenticated SQL Injection
Slug
appointment-booking-calendar
Published
2016-01-27
Title
Appointment Booking Calendar < 1.1.25 - Unauthenticated SQL Injection
Slug
appointment-booking-calendar
Published
2019-07-04
Title
Appointment Booking Calendar < 1.3.19 - Unauthenticated Stored XSS
Slug
appointment-booking-calendar
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
appointment-booking-calendar
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - CSV Injection
Slug
appointment-booking-calendar
Published
2022-10-30
Title
Appointment Booking Calendar < 1.3.70 - Feedback Submission via CSRF
Slug
appointment-booking-calendar
Published
2024-02-28
Title
Booking Calendar < 1.3.83 - CSRF appointment scheduling
Slug
appointment-booking-calendar
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Cross-Site Request Forgery to SQL Injection
Slug
appointment-booking-calendar
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Missing Authorization
Slug
appointment-booking-calendar
Published
2025-11-15
Title
Appointment Booking Calendar < 1.3.96 - Missing Authorization
Slug
appointment-booking-calendar
Published
2025-11-21
Title
Appointment Booking Calendar < 1.3.97 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
Slug
appointment-buddy-online-appointment-booking-by-accrete
Published
2025-02-03
Title
Appointment Buddy Widget <= 1.2 - Reflected Cross-Site Scripting
Slug
appointment-calendar
Published
2016-09-30
Title
Appointment Calendar - Stored Cross-Site Scripting (XSS)
Slug
appointment-calendar
Published
2023-10-18
Title
Appointment Calendar <= 2.9.6 - CSRF
Slug
appointment-calendar
Published
2024-03-29
Title
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
Slug
appointment-hour-booking
Published
2019-07-09
Title
Appointment Hour Booking <= 1.1.45 - Stored Cross-Site Scripting (XSS)
Slug
appointment-hour-booking
Published
2021-09-10
Title
Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS
Slug
appointment-hour-booking
Published
2021-09-06
Title
Appointment Hour Booking < 1.3.16 - Admin+ Stored Cross-Site Scripting
Slug
appointment-hour-booking
Published
2022-05-23
Title
Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting