Known Vulnerabilities for products from Easyappointments
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Easyappointments".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-23622 json | Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify... | Not Provided | 2026-01-15 | 2026-04-29 |
| CVE-2025-50383 json | alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter. | Not Provided | 2025-08-25 | 2026-07-05 |
| CVE-2025-31828 json | Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Reques... | Not Provided | 2025-04-01 | 2026-04-23 |
| CVE-2024-0698 json | The Easy!Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyappointments' s... | Not Provided | 2024-03-05 | 2026-04-08 |
| CVE-2023-3700 json | Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 4.3 - MEDIUM | 2023-07-17 | 2023-08-02 |
| CVE-2023-2105 json | Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 8.8 - HIGH | 2023-04-15 | 2023-04-24 |
| CVE-2023-2104 json | Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 5.4 - MEDIUM | 2023-04-15 | 2023-04-24 |
| CVE-2023-2103 json | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 5.4 - MEDIUM | 2023-04-15 | 2023-04-21 |
| CVE-2023-2102 json | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 4.8 - MEDIUM | 2023-04-15 | 2023-04-24 |
| CVE-2023-1367 json | Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 3.8 - LOW | 2023-03-13 | 2023-03-17 |
| CVE-2023-1269 json | Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 9.8 - CRITICAL | 2023-03-08 | 2023-03-14 |
| CVE-2022-1397 json | API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover. | 8.8 - HIGH | 2022-05-10 | 2022-05-16 |
| CVE-2022-0482 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.1 - CRITICAL | 2022-03-09 | 2022-06-03 |
| CVE-2019-14936 json | Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash). | 5.3 - MEDIUM | 2019-09-11 | 2021-07-21 |
| CVE-2018-13063 json | Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts. | 7.5 - HIGH | 2020-03-16 | 2020-03-18 |
| CVE-2018-13060 json | Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue. | 6.5 - MEDIUM | 2020-03-16 | 2020-03-18 |
Known software with vulnerabilities from Easyappointments
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Easyappointments | Easy!appointments | 1.0.1 |