8.2
High
CVE-2025-46241 Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar…
Description
Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.92.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Appointment Booking Calendar 1.3 | earliest → 1.3.92 | No fix stated |
Other CVEs of Appointment Booking Calendar
The 7 CVEs of Appointment Booking Calendar →
CVE-2026-111727
The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Medium
CVE-2026-12113
The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
4.3
Medium
CVE-2026-12111
The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to,…
4.3
Medium
CVE-2025-13317
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in all versions up to,…
5.3
Medium