| Package | Affected versions | Patched versions |
|---|---|---|
| appointment booking calendar | ≤ 1.1.7 |
SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updating the username.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free