4.7
Medium
CVE-2023-23895 Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Time Slots Booking Form 1.1 | earliest → 1.1.82 | No fix stated |
Other CVEs of WP Time Slots Booking Form
The 11 CVEs of WP Time Slots Booking Form →
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions
8.5
High
CVE-2026-40791
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions
7.1
High
CVE-2026-32432
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
5.3
Medium
CVE-2025-68569
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
6.5
Medium