Known vulnerabilities in Easy!Appointments

Vendor: A.Tselegidis
Software: Easy!Appointments
Software CPE: cpe:2.3:a:alextselegidis:easyappointments:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/alextselegidis/
Total vulnerabilities: 8
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Easy!Appointments Easy!Appointments is affected by 8 known vulnerabilities: 1 medium, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134529 - Exposure of sensitive information to an unauthorized actor
CVE-2026-55651		 CWE-200 Low
No
No
 1.6.0 15.06.2026 SB2026042882
#VU134528 - Authorization Bypass Through User-Controlled Key
CVE-2026-52837		 CWE-639 Medium
No
No
 1.6.0 15.06.2026 SB2026042882
#VU134527 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-52838		 CWE-79 Low
No
No
 1.6.0 15.06.2026 SB2026042882
#VU134526 - Authorization Bypass Through User-Controlled Key
CVE-2026-52839		 CWE-639 Low
No
No
 1.6.0 15.06.2026 SB2026042882
#VU134525 - Server-Side Request Forgery (SSRF)
CVE-2026-52840		 CWE-918 Low
No
No
 1.6.0 15.06.2026 SB2026042882
#VU134524 - Authorization Bypass Through User-Controlled Key
CVE-2026-52841		 CWE-639 Low
No
No
 1.6.0 15.06.2026 SB2026042882
#VU128349 - Cross-Site Request Forgery (CSRF)
CVE-2026-23622		 CWE-352 Low
Available
No
 1.6.0 28.04.2026 SB2026042882
#VU75385 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2102		 CWE-79 Low
No
No
 1.5.0 20.04.2023 SB2023042036