Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: timeslotplugins Clear all filters
TI-2025-11763 CVE-2025-12842 · GHSA-474f-9w4x-43hr

Booking Plugin for WordPress Appointments – Time Slot <= 1.4.7 - Unauthenticated Arbitrary Email Sending

Priority LOW 24

The Booking Plugin for WordPress Appointments – Time Slot plugin for WordPress is vulnerable to unauthorized email sending in versions up to, and including, 1.4.7 due to missing validation on the tslot_appt_email AJAX ac…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0031 Published 2025-11-19 No fix listed CWE-20