Easyappointments vulnerabilities

Products

• Easyappointments 26
• Easy Appointments 23
• Easy\!appointments 9

Newest

• easyappointments easy appointments Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action CVE-2026-9232 6.5 MediumSeptember 19, 2026
• easyappointments easy appointments Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR CVE-2026-87966 5.3 MediumSeptember 18, 2026
• easyappointments easy appointments Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token CVE-2026-87965 4.8 MediumSeptember 18, 2026
• easy appointments appointments, easyappointments easy appointments +1 more WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-81798 7.1 HighSeptember 8, 2026
• easyappointments easy appointments Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing CVE-2026-19406 2.7 LowAugust 19, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass CVE-2026-14225 2.7 LowAugust 6, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing CVE-2026-14226 4.3 MediumJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR CVE-2026-14223 4.3 MediumJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization CVE-2026-14222 3.8 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization CVE-2026-14221 3.8 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure CVE-2026-14188 2.7 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR CVE-2026-14224 5.4 MediumJuly 29, 2026
• easyappointments easy appointments Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion CVE-2026-8789 8.1 HighJuly 24, 2026
• easy appointments appointments, easyappointments easy appointments +1 more WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-61946 Public exploit 6.5 MediumJuly 23, 2026
• easyappointments easy appointments Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation CVE-2026-11992 4.3 MediumJuly 10, 2026
• easy appointments appointments, easyappointments easy appointments +1 more WordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerability CVE-2026-39513 7.5 HighJune 15, 2026
• easyappointments easy appointments Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API CVE-2026-2262 7.5 HighApril 17, 2026
• alextselegidis easyappointments, easyappointments easy\!appointments +1 more CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover CVE-2026-23622 7.4 HighJanuary 15, 2026
• easy appointments appointments, easyappointments easy appointments +1 more WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability CVE-2025-49398 6.5 MediumNovember 6, 2025
• easyappointments easy\!appointments Easy!Appointments SQL injection vulnerability CVE-2025-50383 Public exploitFix available 8.1 HighAugust 25, 2025
• easyappointments easy\!appointments Easy!Appointments Denial of Service (DoS) CVE-2025-29448 Public exploit 7.5 HighMay 7, 2025
• alextselegidis easy!appointments, easyappointments easy\!appointments +1 more WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-31828 4.3 MediumApril 1, 2025
• easyappointments Easy!Appointments Improper Restriction of Excessive Authentication Attempts CVE-2024-57602 9.8 CriticalFebruary 12, 2025
• easyappointments Remote code execution in alextselegidis/easyappointments CVE-2024-57601 6.1 MediumFebruary 12, 2025
• easy-appointments easy appointments WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability CVE-2023-30748 4.3 MediumDecember 9, 2024
• easyappointments A BOLA vulnerability in POST /providers in EasyAppointments < 1.5.0 CVE-2023-3288 8.5 HighJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.0 CVE-2023-38055 9.6 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0 CVE-2023-38054 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.0 CVE-2023-38053 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.0 CVE-2023-38052 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0 CVE-2023-38051 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.0 CVE-2023-38050 9.1 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0 CVE-2023-38049 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0 CVE-2023-38048 9.9 CriticalJuly 9, 2024
• easyappointments A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0. CVE-2023-38047 8.5 HighJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /services in EasyAppointments < 1.5.0 CVE-2023-3289 7.7 HighJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /customers in EasyAppointments < 1.5.0 CVE-2023-3290 5.0 MediumJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.0 CVE-2023-3286 7.7 HighJuly 9, 2024
• easyappointments A BOLA vulnerability in POST /admins in EasyAppointments < 1.5.0 CVE-2023-3287 9.9 CriticalJuly 9, 2024
• alex tselegidis easy!appointments, easyappointments easy\!appointments +1 more WordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability CVE-2023-32295 6.3 MediumApril 11, 2024
• easy-appointments easy appointments, easyappointments +1 more Easy Appointments <= 3.11.18 - Insufficient Authorization CVE-2024-2844 4.3 MediumMarch 29, 2024
• easy-appointments easy appointments Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2842 6.4 MediumMarch 29, 2024
• alextselegidis easy!appointments, easyappointments easy\!appointments +1 more Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0698 6.4 MediumMarch 5, 2024
• easy-appointments easy appointments WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-36424 4.3 MediumJuly 17, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments CVE-2023-3700 Fix available 6.3 MediumJuly 17, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Session Fixation in alextselegidis/easyappointments CVE-2023-2105 5.4 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Improper Access Control in alextselegidis/easyappointments CVE-2023-2104 5.4 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments CVE-2023-2103 4.3 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments CVE-2023-2102 6.8 MediumApril 15, 2023
• alextselegidis alextselegidis/easyappointments, easyappointments +1 more Code Injection in alextselegidis/easyappointments CVE-2023-1367 Fix available 6.0 MediumMarch 13, 2023
• Show olderLoading…