CVE-2025-46241

Description

References

• patchstack.com/database/Wordpress/Plugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-plugin-1-3-92-csrf-to-sql-injection-vulnerability · Third Party Advisory

Weitere Schwachstellen in appointment booking calendar

• CVE-2025-46247KRITISCH 9.8Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality N…
• CVE-2024-12274HOCH 7.5The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to …
• CVE-2024-0856HOCH 8.8The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to mak…
• CVE-2022-43482HOCH 8.8Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.
• CVE-2020-9372HOCH 7.8The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking…