Vulnerabilities

TI-2023-09694 CVE-2023-23895 · GHSA-pj62-g697-6g5q

WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability

LOW 33

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00711 Published 2024-12-09 No fix listed CWE-862

TI-2024-23604 CVE-2024-35735 · GHSA-hch4-9x92-2rqw

WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00402 Published 2024-06-10 No fix listed CWE-862

TI-2024-22130 CVE-2024-33543 · GHSA-p4gw-x82g-6gc3

WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00417 Published 2024-06-09 No fix listed CWE-862

TI-2024-23603 CVE-2024-35734 · GHSA-gmp9-h8j4-2m6g

WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-06-08 No fix listed CWE-79

TI-2022-20165 CVE-2022-41790 · GHSA-3rxg-3f3j-wwx9

WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control

LOW 38

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00466 Published 2024-01-17 No fix listed CWE-862

TI-2023-09758 CVE-2023-23971 · GHSA-wgq6-vqgg-rmx3

WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-04-06 No fix listed CWE-79

TI-2022-00314 CVE-2022-0389 · GHSA-jcqp-7rgj-g3f6

WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting

LOW 23

The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-03-07 Fixed in 1.1.63 CWE-79