WordPress security by component
Easy Appointments
Plugin description
Easy Appointments is a WordPress component with 13 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 7.5.
Plugin slug:
easy-appointmentsLatest vulnerability
CVE-2026-61946: Easy Appointments: A security weakness
Easy Appointments is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.12.27.
Known source slugs: easy!appointments, easy-appointments
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-61946
Easy Appointments: A security weakness
Easy Appointments is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.12.27.
|
3.12.28 |
CVE6.5
NVDPending
|
| Jul 10, 2026 |
CVE-2026-11992
Easy Appointments: A security weakness
Easy Appointments is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.12.27.
|
> 3.12.27 |
CVE4.3
NVDPending
|
| Jun 15, 2026 |
CVE-2026-39513
Easy Appointments: A security weakness
Easy Appointments is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.12.21.
|
3.12.22 |
CVE7.5
NVDPending
|
| Apr 18, 2026 |
CVE-2026-2262
Easy Appointments: Sensitive information exposure
Easy Appointments is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 3.12.21.
|
> 3.12.21 |
CVE7.5
NVDPending
|
| Nov 06, 2025 |
CVE-2025-49398
Easy Appointments: Cross-site scripting
Easy Appointments is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 01, 2025 |
CVE-2025-31828
Easy!Appointments: Cross-site request forgery
Easy!Appointments is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Dec 09, 2024 |
CVE-2023-30748
Easy Appointments: Cross-site scripting
Easy Appointments is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.3
NVD6.1
|
| Mar 29, 2024 |
CVE-2024-2844
Easy Appointments: A security weakness
Easy Appointments is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Mar 29, 2024 |
CVE-2024-2842
Easy Appointments: Cross-site scripting
Easy Appointments is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jul 17, 2023 |
CVE-2022-36424
Easy Appointments: Cross-site request forgery
Easy Appointments is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Jan 23, 2023 |
CVE-2022-4668
Easy Appointments: Cross-site scripting
Easy Appointments is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVD5.4
|
| Sep 11, 2019 |
CVE-2019-14936
Easy!Appointments: Sensitive information exposure
Easy!Appointments is affected by sensitive information exposure. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVD5.3
|
| Oct 23, 2017 |
CVE-2017-15812
Easy Appointments: Cross-site scripting
Easy Appointments is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|