Easy-Appointments

10 CVEs across 2 Easy-Appointments products. Browse Easy-Appointments vulnerabilities, severities, and proof-of-concept exploits.

Easy-Appointments products with known CVEs

ProductCVEs
Easy Appointments6
Easy Appointments4
Easy-Appointments CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-81798High7.12026-09-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affec…
CVE-2026-61946Medium6.52026-07-23Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions.
CVE-2026-39513High7.52026-06-15Unauthenticated Broken Access Control in Easy Appointments <= 3.12.21 versions.
CVE-2025-49398Medium6.52025-11-06Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy Appointments Easy Appointments easy-appointments allows Cod…
CVE-2023-30748Medium4.32024-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This is…
CVE-2024-2844Medium4.32024-03-29The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointmen…
CVE-2024-2842Medium6.42024-03-29The Easy Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ea_full_calendar' shortcode in all versions up to, an…
CVE-2022-36424Medium4.32023-07-17Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions.
CVE-2022-4668Medium5.42023-01-23The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, whi…
CVE-2017-15812Medium6.12017-10-23The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel.