AB
Product
Appointment Booking Calendar
16
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 5Medium 7Low 0
Watch
Add Appointment Booking Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111727 New | 6.4 | Oct 28 | Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter Affected: through 1.4.05 |
| CVE-2019-14791 | 6.1 | Aug 9 | The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter Affected: 1.3.18 |
| CVE-2025-64261 | 5.4 | Nov 13 | WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability Affected: through 1.3.95 |
| CVE-2025-13317 | 5.3 | Nov 22 | Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter Affected: through 1.3.96 |
| CVE-2020-9371 | 4.8 | Mar 4 | Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress Affected: before 1.3.35 |
| CVE-2026-12113 | 4.3 | Jul 1 | Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure Affected: through 1.4.02 |
| CVE-2026-12111 | 4.3 | Jun 18 | Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter Affected: through 1.4.01 |
Showing 7