WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
appointment-booking-calendar
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Cross-Site Request Forgery to SQL Injection
Slug
appointment-booking-calendar
Published
2025-04-22
Title
Appointment Booking Calendar < 1.3.93 - Missing Authorization
Slug
appointment-booking-calendar
Published
2025-11-15
Title
Appointment Booking Calendar < 1.3.96 - Missing Authorization
Slug
appointment-booking-calendar
Published
2025-11-21
Title
Appointment Booking Calendar < 1.3.97 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
Slug
appointment-buddy-online-appointment-booking-by-accrete
Published
2025-02-03
Title
Appointment Buddy Widget <= 1.2 - Reflected Cross-Site Scripting
Slug
appointment-calendar
Published
2016-09-30
Title
Appointment Calendar - Stored Cross-Site Scripting (XSS)
Slug
appointment-calendar
Published
2023-10-18
Title
Appointment Calendar <= 2.9.6 - CSRF
Slug
appointment-calendar
Published
2024-03-29
Title
Appointment Calendar <= 2.9.6 - Reflected Cross-Site Scripting
Slug
appointment-hour-booking
Published
2019-07-09
Title
Appointment Hour Booking <= 1.1.45 - Stored Cross-Site Scripting (XSS)
Slug
appointment-hour-booking
Published
2021-09-10
Title
Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS
Slug
appointment-hour-booking
Published
2021-09-06
Title
Appointment Hour Booking < 1.3.16 - Admin+ Stored Cross-Site Scripting
Slug
appointment-hour-booking
Published
2022-05-23
Title
Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting
Slug
appointment-hour-booking
Published
2022-10-30
Title
Appointment Hour Booking < 1.3.72 - Feedback Submission via CSRF
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - Unauthenticated iFrame Injection
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - CAPTCHA Bypass
Slug
appointment-hour-booking
Published
2022-11-29
Title
Appointment Hour Booking < 1.3.73 - CSV Injection
Slug
appointment-hour-booking
Published
2024-04-22
Title
Appointment Hour Booking < 1.4.57 - Captcha Bypass
Slug
appointment-hour-booking
Published
2026-01-27
Title
Appointment Hour Booking – Booking Calendar < 1.5.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration
Slug
appointments
Published
2017-10-02
Title
Appointments <= 2.2.1 - Unauthenticated PHP Object Injection
Slug
appointmind
Published
2024-11-01
Title
Appointmind < 4.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
appointmind
Published
2025-09-16
Title
Appointmind < 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
appointy-appointment-scheduler
Published
2025-03-31
Title
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
Slug
apppresser
Published
2023-11-16
Title
AppPresser < 4.3.0 - Insecure Password Reset Mechanism
Slug
apppresser
Published
2024-04-05
Title
AppPresser < 4.3.1 - Cross-Site Request Forgery via toggle_logging_callback()
Slug
apppresser
Published
2024-04-10
Title
AppPresser < 4.3.1 - Cross-Site Request Forgery via force_logging_off()