Approved changes feed: RSS · Atom

cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodepeople (f85d1a73-9b3f-50b5-b09d-cd136586594b)
ProductWp Time Slots Booking Form (7cd33c00-22db-5437-94bc-a47e70f0bcbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48882 vulnerable 2026-07-29 00:55:01.750528 WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
HIGH (8.5)
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.
Published: 2026-06-15T20:19:02.652Z
Updated: 2026-06-16T01:22:54.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40791 vulnerable 2026-07-29 00:49:30.467316 WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.
Published: 2026-06-15T20:18:26.123Z
Updated: 2026-06-16T01:28:26.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32432 vulnerable 2026-06-08 07:57:17.577145 WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.42.
Published: 2026-03-13T11:42:18.279Z
Updated: 2026-04-29T09:51:59.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68569 vulnerable 2026-06-08 07:41:21.395701 WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.39.
Published: 2025-12-24T13:10:36.669Z
Updated: 2026-04-28T16:14:30.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49332 vulnerable 2026-06-08 07:29:12.940730 WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.30.
Published: 2025-06-06T12:53:57.993Z
Updated: 2026-04-28T16:13:01.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35735 vulnerable 2026-06-08 06:39:42.559709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35734 vulnerable 2026-06-08 06:39:42.557789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33543 vulnerable 2026-06-08 06:37:31.624193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23971 vulnerable 2026-06-08 05:56:04.909060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23895 vulnerable 2026-06-08 05:56:04.654047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41790 vulnerable 2026-06-08 05:48:30.969484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.