Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: appointify Clear all filters
TI-2025-36734 CVE-2025-59129 · GHSA-f4fr-j83v-v22w

WordPress Appointify plugin <= 1.0.8 - SQL Injection vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appointify Appointify appointify allows Blind SQL Injection.This issue affects Appointify: from n/a through <= 1.0.8.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00353 Published 2025-12-30 No fix listed CWE-89
TI-2025-22740 CVE-2025-31577 · GHSA-jpmm-f834-xw7f

WordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability

Priority LOW 29

Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify appointify allows Upload a Web Shell to a Web Server.This issue affects Appointify: from n/a through <= 1.0.8.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00337 Published 2025-03-31 No fix listed CWE-434