Approved changes feed: RSS · Atom

cpe:2.3:a:codepeople:wp_time_slots_booking_form:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodepeople (f85d1a73-9b3f-50b5-b09d-cd136586594b)
ProductWp Time Slots Booking Form (7cd33c00-22db-5437-94bc-a47e70f0bcbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32432 vulnerable 2026-06-03 15:20:43.024695 WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.42.
Published: 2026-03-13T11:42:18.279Z
Updated: 2026-04-29T09:51:59.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68569 vulnerable 2026-06-03 15:11:03.520520 WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.39.
Published: 2025-12-24T13:10:36.669Z
Updated: 2026-04-28T16:14:30.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49332 vulnerable 2026-06-03 15:01:44.494843 WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.30.
Published: 2025-06-06T12:53:57.993Z
Updated: 2026-04-28T16:13:01.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35735 vulnerable 2026-06-03 14:56:02.909535 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.
Published: 2024-06-10T07:43:15.984Z
Updated: 2026-04-28T16:09:54.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35734 vulnerable 2026-06-03 14:56:02.908436 WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10.
Published: 2024-06-08T12:49:14.058Z
Updated: 2026-04-28T16:09:54.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33543 vulnerable 2026-06-03 14:55:52.539099 WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.
Published: 2024-06-09T12:11:16.334Z
Updated: 2026-04-28T16:09:42.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23971 vulnerable 2026-06-03 14:49:29.152376 WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
Published: 2023-04-06T05:04:10.875Z
Updated: 2026-04-28T16:08:04.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23895 vulnerable 2026-06-03 14:49:28.929345 WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability
MEDIUM (4.7)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.
Published: 2024-12-09T11:31:43.952Z
Updated: 2026-04-28T16:08:03.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41790 vulnerable 2026-06-03 14:48:06.002062 WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
MEDIUM (4.3)
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.
Published: 2024-01-17T18:13:44.505Z
Updated: 2026-04-28T16:07:49.716Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.