Browse CVEs

HIGH 8.8 CVE-2026-23622 Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_verify() only enforces CSRF fo… Easy\!appointments after 1.5.2 Fix from $1,9502026-01-15 HIGH 8.1 CVE-2025-50383 alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter. Easy\!appointments No fix yet Fix from $1,9502025-08-25 HIGH 7.5 CVE-2025-29448 Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a den… Easy\!appointments Patch available Fix from $1,9502025-05-07 HIGH 8.8 CVE-2025-31828 Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue aff… Easy\!appointments after 1.4.2 Fix from $1,9502025-04-01 CRITICAL 9.8 CVE-2024-57602 An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file. Easyappointments No fix yet Fix from $2,3002025-02-12 MEDIUM 6.1 CVE-2024-57601 Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_setti… Easyappointments No fix yet Fix from $1,6002025-02-12 HIGH 8.8 CVE-2023-3287 A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege e… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.8 CVE-2023-3288 A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege … Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38055 A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (incl… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 MEDIUM 6.5 CVE-2023-3286 A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in una… Easyappointments 1.5.0+ Fix from $1,6002024-07-09 MEDIUM 6.5 CVE-2023-3289 A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This results in… Easyappointments 1.5.0+ Fix from $1,6002024-07-09 MEDIUM 5.0 CVE-2023-3290 A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results in unauth… Easyappointments 1.5.0+ Fix from $1,6002024-07-09 HIGH 8.1 CVE-2023-38050 A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (includi… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38051 A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (se… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38052 A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin). Th… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38053 A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (in… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38054 A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (custo… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38047 A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} allows a low privileged user to fetch, modify or delete the category of any user (i… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38048 A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider)… Easyappointments 1.5.0+ Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-38049 A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any … Easyappointments 1.5.0+ Fix from $1,9502024-07-09 MEDIUM 6.3 CVE-2023-32295 Missing Authorization vulnerability in Alex Tselegidis Easy!Appointments.This issue affects Easy!Appointments: from n/a through 1.3.3. Easy\!appointments 1.4.0+ Fix from $1,6002024-04-11 MEDIUM 5.4 CVE-2024-0698 The Easy!Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'easyappointments' shortcode in all versions… Easy\!appointments 1.3.2+ Fix from $1,6002024-03-05 HIGH 8.8 CVE-2023-2105 Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Easyappointments 1.5.0+ Fix from $1,9502023-04-15 MEDIUM 5.4 CVE-2023-2103 Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Easyappointments 1.5.0+ Fix from $1,6002023-04-15 MEDIUM 5.4 CVE-2023-2104 Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Easyappointments 1.5.0+ Fix from $1,6002023-04-15 CRITICAL 9.8 CVE-2023-1269 Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Easyappointments 1.5.0+ Fix from $2,3002023-03-08 HIGH 8.8 CVE-2022-1397 API Privilege Escalation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. Full system takeover. Easyappointments 1.5.0+ Fix from $1,9502022-05-10 CRITICAL 9.1 CVE-2022-0482EPSS 44% Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3. Easyappointments 1.4.3+ Fix from $2,3002022-03-09 HIGH 7.5 CVE-2018-13063 Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts. Easy\!appointments 1.2.1+ Fix from $1,9502020-03-16 MEDIUM 6.5 CVE-2018-13060 Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue. Easy\!appointments 1.2.1+ Fix from $1,6002020-03-16