What’s Vulnerable › Products
codepeople Appointment Hour Booking – Booking Calendar vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your codepeople Appointment Hour Booking – Booking Calendar version is affected
Latest codepeople Appointment Hour Booking – Booking Calendar vulnerabilities
- CVE-2026-96573 — Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer (CVSS 7.2)
- CVE-2026-1083 — Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration (CVSS 4.4)
- CVE-2022-4036 — Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass (CVSS 5.3)
- CVE-2022-4035 — Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form (CVSS 6.1)
- CVE-2022-4034 — Appointment Hour Booking <= 1.3.72 - CSV Injection (CVSS 7.8)
- CVE-2022-41692 — WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability (CVSS 8.8)
- CVE-2022-1710 — Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2021-24712 — Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS (CVSS 5.4)
- CVE-2021-24673 — Appointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2019-13505 — (CVSS 6.1)