İçeriğe atla
Noroxi

easyappointments kayıtları

easyappointments üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%58,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

34 kayıt
  • CVE-2022-0482
    49Planlayın

    Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

    KritikCVSS 9,1Kavram kanıtıEPSS %44

    easyappointments · easyappointments9 Mar 2022

  • CVE-2024-57602
    39İzleyin

    An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.

    KritikCVSS 9,8İstismar yokEPSS %1

    easyappointments · easyappointments12 Şub 2025

  • CVE-2023-1269
    39İzleyin

    Use of Hard-coded Credentials in alextselegidis/easyappointments

    KritikCVSS 9,8İstismar yokEPSS %1

    easyappointments · easyappointments8 Mar 2023

  • CVE-2022-1397
    35İzleyin

    API Privilege Escalation in alextselegidis/easyappointments

    YüksekCVSS 8,8İstismar yokEPSS %1

    easyappointments · easyappointments10 May 2022

  • CVE-2023-2105
    35İzleyin

    Session Fixation in alextselegidis/easyappointments

    YüksekCVSS 8,8İstismar yokEPSS %1

    easyappointments · easyappointments15 Nis 2023

  • CVE-2023-3287
    35İzleyin

    A BOLA vulnerability in POST /admins in EasyAppointments < 1.5.0

    YüksekCVSS 8,8İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-3288
    35İzleyin

    A BOLA vulnerability in POST /providers in EasyAppointments < 1.5.0

    YüksekCVSS 8,8İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2025-31828
    35İzleyin

    WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    easyappointments · easy\!appointments1 Nis 2025

  • CVE-2023-38049
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38052
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38048
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38053
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38051
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38054
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38055
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-38047
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0.

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2025-50383
    32İzleyin

    alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    easyappointments · easy\!appointments25 Ağu 2025

  • CVE-2023-38050
    32İzleyin

    A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.0

    YüksekCVSS 8,1İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2018-13063
    30İzleyin

    Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.

    YüksekCVSS 7,5İstismar yokEPSS %1

    easyappointments · easy\!appointments16 Mar 2020

  • CVE-2025-29448
    30İzleyin

    Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, caus

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    easyappointments · easy\!appointments7 May 2025

  • CVE-2026-23622
    29İzleyin

    CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover

    YüksekCVSS 7,4İstismar yokEPSS %0

    easyappointments · easy\!appointments15 Oca 2026

  • CVE-2018-13060
    26İzleyin

    Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.

    OrtaCVSS 6,5İstismar yokEPSS %1

    easyappointments · easy\!appointments16 Mar 2020

  • CVE-2023-3289
    26İzleyin

    A BOLA vulnerability in POST /services in EasyAppointments < 1.5.0

    OrtaCVSS 6,5İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-3286
    26İzleyin

    A BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.0

    OrtaCVSS 6,5İstismar yokEPSS %0

    easyappointments · easyappointments9 Tem 2024

  • CVE-2023-32295
    25İzleyin

    WordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability

    OrtaCVSS 6,3İstismar yokEPSS %1

    easyappointments · easy\!appointments11 Nis 2024