Approved changes feed: RSS · Atom

cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCodepeople (f85d1a73-9b3f-50b5-b09d-cd136586594b)
ProductWp Time Slots Booking Form (7cd33c00-22db-5437-94bc-a47e70f0bcbd)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35735 vulnerable 2026-06-03 14:56:02.909583 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.
Published: 2024-06-10T07:43:15.984Z
Updated: 2026-04-28T16:09:54.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35734 vulnerable 2026-06-03 14:56:02.909081 WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10.
Published: 2024-06-08T12:49:14.058Z
Updated: 2026-04-28T16:09:54.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33543 vulnerable 2026-06-03 14:55:52.539912 WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.
Published: 2024-06-09T12:11:16.334Z
Updated: 2026-04-28T16:09:42.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23971 vulnerable 2026-06-03 14:49:29.152414 WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
Published: 2023-04-06T05:04:10.875Z
Updated: 2026-04-28T16:08:04.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23895 vulnerable 2026-06-03 14:49:28.929894 WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability
MEDIUM (4.7)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.
Published: 2024-12-09T11:31:43.952Z
Updated: 2026-04-28T16:08:03.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41790 vulnerable 2026-06-03 14:48:06.002683 WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
MEDIUM (4.3)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.
Published: 2024-01-17T18:13:44.505Z
Updated: 2026-04-28T16:07:49.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0389 vulnerable 2026-06-03 14:45:56.078810 WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting
The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2022-03-07T08:16:30.000Z
Updated: 2024-08-02T23:25:40.399Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.