| CVE-2026-105258 |
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings…
|
3.5
Faible
|
29 oct. 2026 |
| CVE-2026-105257 |
The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user…
|
2.7
Faible
|
21 oct. 2026 |
| CVE-2026-105196 |
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of…
|
3.3
Faible
|
8 oct. 2026 |
| CVE-2026-105197 |
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to…
|
2.7
Faible
|
8 oct. 2026 |
| CVE-2026-105198 |
The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order…
|
5.3
Moyenne
|
8 oct. 2026 |
| CVE-2026-15250 |
The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an…
|
5.3
Moyenne
|
30 juil. 2026 |
| CVE-2026-11866 |
The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing…
|
5.4
Moyenne
|
16 juil. 2026 |