Appointment Hour Booking – Booking Calendar

Уязвимости

• CVE-2022-41692нужен вход≤ 1.3.71

  WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

  Высокий 8.8

• CVE-2022-4034без авторизации · нужен клик≤ 1.3.72

  Appointment Hour Booking <= 1.3.72 - CSV Injection

  Высокий 7.8

• CVE-2026-96573без авторизации≤ 1.5.97

  Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Rendere

  Высокий 7.2

• CVE-2026-66679без авторизации≤ 1.5.91

  WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-65514участник+≤ 1.5.86

  WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2022-4035без авторизации≤ 1.3.72

  Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form

  Средний 6.1

• CVE-2019-13505без авторизации · нужен клик

  The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.

  Средний 6.1

• CVE-2023-45649без авторизации≤ 1.4.23

  WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-32720без авторизации≤ 1.4.56

  WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

  Средний 5.3

• CVE-2022-4036без авторизации≤ 1.3.72

  Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass

  Средний 5.3

• CVE-2026-1083админ≤ 1.5.60

  Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration

  Средний 4.4