5.4
Medium
CVE-2025-64261 Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows…
Description
Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.95.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Appointment Booking Calendar 1.3 | earliest → 1.3.95 | No fix stated |
Other CVEs of Appointment Booking Calendar
The 7 CVEs of Appointment Booking Calendar →
CVE-2026-111727
The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Medium
CVE-2026-12113
The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
4.3
Medium
CVE-2026-12111
The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to,…
4.3
Medium
CVE-2025-13317
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in all versions up to,…
5.3
Medium