GCVE - cpe:2.3:a:nikola_loncar:easy_appointments:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nikola_loncar:easy_appointments:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nikola Loncar (`707763bb-4400-5a79-9554-e13724d98ea3`)
Product	Easy Appointments (`394ff3b4-e179-5970-8333-77d192cc5c0d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30748`	vulnerable	2026-06-08 06:04:40.914135	WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability MEDIUM (4.3) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7. Published: 2024-12-09T11:31:03.798Z Updated: 2026-04-28T16:08:19.270Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/easy-appointments/vulnerability/wordpress-easy-appointments-plugin-3-10-7-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36424`	vulnerable	2026-06-08 05:46:07.388802	WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (4.3) Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions. Published: 2023-07-17T15:12:46.169Z Updated: 2026-04-28T16:07:46.176Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/easy-appointments/wordpress-easy-appointments-plugin-3-11-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.