Skip to content
Sign in
7.5 High

CVE-2024-12274 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings…

Description

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).

Affected products and versions

Product Affected versions Fixed in
Appointment Booking Calendar Plugin and Scheduling Plugin 1.1 earliest → < 1.1.23 1.1.23

Other CVEs of Appointment Booking Calendar Plugin and Scheduling Plugin

The 3 CVEs of Appointment Booking Calendar Plugin and Scheduling Plugin →
CVE-2026-76586 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the… 7.5 High CVE-2026-12378 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data… 8.1 High
Track this CVE