Read the docs

tenteeglobal

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

tenteeglobal records in CISA KEV

No tenteeglobal vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-12859 CVE-2026-15282 · GHSA-xp53-g87w-p23f

Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01079 Published 2026-07-10 No fix listed CWE-434
TI-2024-36449 CVE-2024-54361 · GHSA-mwqf-g5pc-qrr8

WordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tenteeglobal Instant Appointment instant-appointment allows SQL Injection.This issue affects Instant Appointment: from…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00538 Published 2024-12-16 No fix listed CWE-89
TI-2025-17439 CVE-2025-23672 · GHSA-2cvx-pp7q-xwgc

WordPress Instant Appointment plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tenteeglobal Instant Appointment instant-appointment allows Reflected XSS.This issue affects Instant Appointment: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00386 Published 2025-01-22 No fix listed CWE-79
Open these records in search →