Unknown Easy Appointments vulnerabilities

• easyappointments easy appointments Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR CVE-2026-87966 5.3 MediumSeptember 18, 2026
• easyappointments easy appointments Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token CVE-2026-87965 4.8 MediumSeptember 18, 2026
• easyappointments easy appointments Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing CVE-2026-19406 2.7 LowAugust 19, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass CVE-2026-14225 2.7 LowAugust 6, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing CVE-2026-14226 4.3 MediumJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR CVE-2026-14223 4.3 MediumJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization CVE-2026-14222 3.8 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization CVE-2026-14221 3.8 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure CVE-2026-14188 2.7 LowJuly 30, 2026
• easyappointments easy appointments Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR CVE-2026-14224 5.4 MediumJuly 29, 2026
• easy-appointments easy appointments Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode CVE-2022-4668 5.4 MediumJanuary 23, 2023