VendorsDWBoosterappointment_hour_bookingall versions
Vulnerabilities

DWBooster Appointment Hour Booking

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2022-41692
WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability
Published 2022-11-18 · Modified
8.8EPSS 0.005
CVE-2022-4034
Appointment Hour Booking <= 1.3.72 - CSV Injection
Published 2022-11-29 · Modified
7.8EPSS 0.006
CVE-2022-4035
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
Published 2022-11-29 · Modified
7.2EPSS 0.007
CVE-2019-13505
The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.
Published 2019-07-11 · Modified
6.1EPSS 0.014
CVE-2021-24712
Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS
Published 2021-10-11 · Modified
5.4EPSS 0.006
CVE-2022-4036
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
Published 2022-11-29 · Modified
5.3EPSS 0.005
CVE-2021-24673
Appointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site Scripting
Published 2021-10-04 · Modified
4.8EPSS 0.006
CVE-2022-1710
Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting
Published 2022-06-13 · Modified
4.8EPSS 0.006