What’s Vulnerable › Products

easyappointments Easy!Appointments vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your easyappointments Easy!Appointments version is affected

Latest easyappointments Easy!Appointments vulnerabilities

• CVE-2026-23622 — CSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover (CVSS 8.8)
• CVE-2025-50383 — (CVSS 8.1)
• CVE-2025-29448 — (CVSS 7.5)
• CVE-2025-31828 — WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 8.8)
• CVE-2023-32295 — WordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability (CVSS 6.3)
• CVE-2024-0698 — Easy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2018-13063 — (CVSS 7.5)
• CVE-2018-13060 — (CVSS 6.5)
• CVE-2019-14936 — (CVSS 5.3)