CVE-2025-46241

ALTO 8.8CVE-2025-46241 · Published 22/04/2025 · updated 17/06/2026

In breve

CVE-2025-46241 è una vulnerabilità ALTO (CVSS 8.8) che riguarda appointment booking calendar (codepeople).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.19%, superiore al 8.9% delle vulnerabilità.
Correzione: aggiornare a 1.3.93 o successiva.

Package	Affected versions	Patched versions
appointment booking calendar codepeople	`< 1.3.93`	`1.3.93`

Description

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.92.

References

patchstack.com/database/Wordpress/Plugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-plugin-1-3-92-csrf-to-sql-injection-vulnerability · Third Party Advisory

Altre vulnerabilità di appointment booking calendar

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

appointment booking calendar

codepeople

< 1.3.93

1.3.93

Altre vulnerabilità di appointment booking calendar

Vedi tutto →