AB
Product
Appointment Booking Calendar
by codepeople · last CVE Oct 28, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 5Low 0
Watch

Add Appointment Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-46241
8.8
0%
Apr 22
Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking…
Affected: before 1.3.93
CVE-2024-0856
8.8
0%
Mar 20
The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
Affected: before 1.3.83
CVE-2022-43482
8.8
1%
Nov 18
Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress
Affected: before 1.3.70
CVE-2020-9372
7.8
9%
Mar 4
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then…
Affected: before 1.3.35
CVE-2024-12274
7.5
1%
Jan 13
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily…
Affected: before 1.1.23
Showing 5