Security
فارسی
All products

easy-appointments

WordPress · Plugin
23 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-87966 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 4.0.2.1 - Missing AuthorizationCVE-2026-87965 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX ActionCVE-2026-9232 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 4.0.2.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-81798 easy-appointments WordPress High No fix reported
Easy Appointments < 4.0.1 - Missing AuthorizationCVE-2026-14221 easy-appointments WordPress Medium Fix reported
Easy Appointments < 4.0.1 - Authenticated (Contributor+) Information ExposureCVE-2026-19406 easy-appointments WordPress Medium Fix reported
Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-14223 easy-appointments WordPress Medium Fix reported
Easy Appointments < 3.12.28 - Missing AuthorizationCVE-2026-14222 easy-appointments WordPress Medium Fix reported
Easy Appointments < 3.12.28 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-14188 easy-appointments WordPress Medium Fix reported
Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Information ExposureCVE-2026-14226 easy-appointments WordPress Medium Fix reported
Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-14224 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection DeletionCVE-2026-8789 easy-appointments WordPress High Fix reported
Easy Appointments <= 3.12.27 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-61946 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment ManipulationCVE-2026-11992 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.12.21 - Missing AuthorizationCVE-2026-39513 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST APICVE-2026-2262 easy-appointments WordPress High Fix reported
Easy Appointments <= 3.12.14 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2025-49398 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.11.18 - Insufficient AuthorizationCVE-2024-2844 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-2842 easy-appointments WordPress Medium Fix reported
Easy Appointments <= 3.11.0 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-30748 easy-appointments WordPress Medium Fix reported