VendorsEasy!Appointmentseasy%5C!appointmentsall versions
Vulnerabilities

Easy!Appointments Easy!Appointments

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

9CVEs
CVE-2025-31828
WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Published 2025-04-01 · Modified
8.8EPSS 0.003
CVE-2026-23622
CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover
Published 2026-01-15 · Analyzed
8.8EPSS 0.002
CVE-2025-50383
alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.
Published 2025-08-25 · Modified
8.1EPSS 0.004
CVE-2018-13063
Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.
Published 2020-03-16 · Modified
7.5EPSS 0.013
CVE-2025-29448
Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.
Published 2025-05-07 · Analyzed
7.5EPSS 0.006
CVE-2018-13060
Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.
Published 2020-03-16 · Modified
6.5EPSS 0.009
CVE-2024-0698
Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-03-05 · Modified
6.4EPSS 0.004
CVE-2023-32295
WordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability
Published 2024-04-11 · Analyzed
6.3EPSS 0.005
CVE-2019-14936
Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash).
Published 2019-09-11 · Modified
5.3EPSS 0.015