Alextselegidis vulnerabilities

Products

• Easyappointments 13
• Alextselegidis/easyappointments 10
• Easy!appointments 3
• Plainpad 2

Newest

• alextselegidis easyappointments Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint CVE-2026-108758 8.8 HighOctober 11, 2026
• alextselegidis plainpad Plainpad Missing Rate Limiting via POST /v1/sessions CVE-2026-73529 6.9 MediumAugust 18, 2026
• alextselegidis easyappointments Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure CVE-2026-55651 7.1 HighJuly 14, 2026
• alextselegidis easyappointments Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync CVE-2026-52841 3.1 LowJuly 14, 2026
• alextselegidis easyappointments Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network CVE-2026-52840 2.7 LowJuly 14, 2026
• alextselegidis easyappointments Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass CVE-2026-52839 Fix available 3.3 LowJuly 14, 2026
• alextselegidis easyappointments Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS CVE-2026-52838 2.6 LowJuly 14, 2026
• alextselegidis easyappointments Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page CVE-2026-52837 6.9 MediumJuly 14, 2026
• alextselegidis plainpad Plainpad: Privilege Escalation via Writable Admin Field in Profile Update (Access Control) CVE-2026-42562 8.3 HighMay 9, 2026
• alextselegidis easyappointments, easyappointments easy\!appointments +1 more CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover CVE-2026-23622 7.4 HighJanuary 15, 2026
• alextselegidis easy!appointments, easyappointments easy\!appointments +1 more WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-31828 4.3 MediumApril 1, 2025
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0 CVE-2023-38054 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0 CVE-2023-38049 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /customers in EasyAppointments < 1.5.0 CVE-2023-3290 5.0 MediumJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.0 CVE-2023-3285 7.7 HighJuly 9, 2024
• alex tselegidis easy!appointments, easyappointments easy\!appointments +1 more WordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability CVE-2023-32295 6.3 MediumApril 11, 2024
• alextselegidis easy!appointments, easyappointments easy\!appointments +1 more Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0698 6.4 MediumMarch 5, 2024
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments CVE-2023-3700 Fix available 6.3 MediumJuly 17, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments, fossbilling +2 more Open Redirect in alextselegidis/easyappointments CVE-2023-3568 6.3 MediumJuly 10, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Session Fixation in alextselegidis/easyappointments CVE-2023-2105 5.4 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Improper Access Control in alextselegidis/easyappointments CVE-2023-2104 5.4 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments CVE-2023-2103 4.3 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments CVE-2023-2102 6.8 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Code Injection in alextselegidis/easyappointments CVE-2023-1367 Fix available 6.0 MediumMarch 13, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Use of Hard-coded Credentials in alextselegidis/easyappointments CVE-2023-1269 6.5 MediumMarch 8, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more API Privilege Escalation in alextselegidis/easyappointments CVE-2022-1397 8.8 HighMay 10, 2022
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments CVE-2022-0482 Public exploitFix available EPSS 43.7% 9.1 CriticalMarch 9, 2022