Appointment Booking Calendar

Güvenlik açıkları

• CVE-2025-46247kimlik doğrulamasız≤ 1.3.92

  WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability

  Kritik 9.8

• CVE-2016-10916kimlik doğrulamasız

  The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.

  Kritik 9.8

• CVE-2025-46241kimlik doğrulamasız · tıklama gerekir≤ 1.3.92

  WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability

  Yüksek 8.8

• CVE-2022-43482giriş gerekir≤ 1.3.69

  WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

  Yüksek 8.8

• CVE-2020-9372kimlik doğrulamasız · tıklama gerekir

  The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking

  Yüksek 7.8

• CVE-2015-7319

  SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 fo

  Yüksek 7.5

• CVE-2019-14791kimlik doğrulamasız · tıklama gerekir

  The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter.

  Orta 6.1

• CVE-2025-64261giriş gerekir≤ 1.3.95

  WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-13317kimlik doğrulamasız≤ 1.3.96

  Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter

  Orta 5.3

• CVE-2020-9371yüksek yetki

  Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress.

  Orta 4.8

• CVE-2026-12113katılımcı+≤ 1.4.02

  Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure

  Orta 4.3

• CVE-2026-12111katılımcı+≤ 1.4.01

  Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter

  Orta 4.3

• CVE-2015-7320

  Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calenda

  Orta 4.3