Skip to contentEasyappointments Easy Appointments vulnerabilities
- easyappointments easy appointmentsEasy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX ActionCVE-2026-92326.5 Medium
- easyappointments easy appointmentsEasy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDORCVE-2026-879665.3 Medium
- easyappointments easy appointmentsEasy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link TokenCVE-2026-879654.8 Medium
- easy appointments appointments, easyappointments easy appointments +1 moreWordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-817987.1 High
- easyappointments easy appointmentsEasy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments ListingCVE-2026-194062.7 Low
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist BypassCVE-2026-142252.7 Low
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments ListingCVE-2026-142264.3 Medium
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDORCVE-2026-142234.3 Medium
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing AuthorizationCVE-2026-142223.8 Low
- easyappointments easy appointmentsEasy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing AuthorizationCVE-2026-142213.8 Low
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Contributor+ Customer Data DisclosureCVE-2026-141882.7 Low
- easyappointments easy appointmentsEasy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDORCVE-2026-142245.4 Medium
- easyappointments easy appointmentsEasy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection DeletionCVE-2026-87898.1 High
- easy appointments appointments, easyappointments easy appointments +1 moreWordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-61946Public exploit6.5 Medium
- easyappointments easy appointmentsEasy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment ManipulationCVE-2026-119924.3 Medium
- easy appointments appointments, easyappointments easy appointments +1 moreWordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerabilityCVE-2026-395137.5 High
- easyappointments easy appointmentsEasy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST APICVE-2026-22627.5 High
- easy appointments appointments, easyappointments easy appointments +1 moreWordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerabilityCVE-2025-493986.5 Medium
- easy-appointments easy appointmentsWordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2023-307484.3 Medium
- easy-appointments easy appointments, easyappointments +1 moreEasy Appointments <= 3.11.18 - Insufficient AuthorizationCVE-2024-28444.3 Medium
- easy-appointments easy appointmentsEasy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-28426.4 Medium
- easy-appointments easy appointmentsWordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-364244.3 Medium
- easy-appointments easy appointmentsEasy Appointments < 3.11.2 - Contributor+ Stored XSS in ShortcodeCVE-2022-46685.4 Medium