Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: tenteeglobal Clear all filters
TI-2026-12859 CVE-2026-15282 · GHSA-xp53-g87w-p23f

Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01079 Published 2026-07-10 No fix listed CWE-434
TI-2025-17439 CVE-2025-23672 · GHSA-2cvx-pp7q-xwgc

WordPress Instant Appointment plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tenteeglobal Instant Appointment instant-appointment allows Reflected XSS.This issue affects Instant Appointment: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00386 Published 2025-01-22 No fix listed CWE-79
TI-2024-36449 CVE-2024-54361 · GHSA-mwqf-g5pc-qrr8

WordPress Instant Appointment plugin <= 1.2 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tenteeglobal Instant Appointment instant-appointment allows SQL Injection.This issue affects Instant Appointment: from…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00538 Published 2024-12-16 No fix listed CWE-89