| CVE-2026-105258 |
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings…
|
3.5
Low
|
Oct 29, 2026 |
| CVE-2026-105257 |
The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user…
|
2.7
Low
|
Oct 21, 2026 |
| CVE-2026-105196 |
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of…
|
3.3
Low
|
Oct 8, 2026 |
| CVE-2026-105197 |
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to…
|
2.7
Low
|
Oct 8, 2026 |
| CVE-2026-105198 |
The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order…
|
5.3
Medium
|
Oct 8, 2026 |
| CVE-2026-15250 |
The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an…
|
5.3
Medium
|
Jul 30, 2026 |
| CVE-2026-11866 |
The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing…
|
5.4
Medium
|
Jul 16, 2026 |