4.3
Medium
CVE-2025-49332 Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form…
Description
Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.30.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Time Slots Booking Form 1.2 | earliest → 1.2.30 | No fix stated |
Other CVEs of WP Time Slots Booking Form
The 11 CVEs of WP Time Slots Booking Form →
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions
8.5
High
CVE-2026-40791
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions
7.1
High
CVE-2026-32432
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
5.3
Medium
CVE-2025-68569
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows…
6.5
Medium