WP Time Slots Booking Form vulnerabilities | LiveThreat CVE Feed

Product

WP Time Slots Booking Form

by codepeople · last CVE Jun 15, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 5Medium 5Low 0

Severity

All severities11 Critical1 High5 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP Time Slots Booking Form to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-35735	9.8	0%	Jun 10	Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11 Affected: before 1.2.12
CVE-2022-41790	8.8	0%	Jan 17	Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76 Affected: through 1.1.76
CVE-2026-48882	8.5	0%	Jun 15	WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability Affected: through 1.2.50
CVE-2024-33543	7.5	0%	Jun 9	Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06 Affected: before 1.2.07
CVE-2023-23895	7.2	1%	Dec 9	Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time… Affected: before 1.1.83
CVE-2026-40791	7.1	0%	Jun 15	WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability Affected: through 1.2.46
CVE-2025-68569	6.5	0%	Dec 24	WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability Affected: through 1.2.39
CVE-2024-35734	6.1	0%	Jun 8	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue… Affected: before 1.2.11
CVE-2026-32432	5.3	0%	Mar 13	WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability Affected: through 1.2.42
CVE-2023-23971	4.8	0%	Apr 6	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions Affected: through 1.1.81
CVE-2022-0389	4.8	1%	Mar 7	The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks… Affected: before 1.1.63