Codepeople Wp Time Slots Booking Form vulnerabilities
12 vulnerabilities
Known vulnerabilities in Codepeople Wp Time Slots Booking Form, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-68569codepeoplewp_time_slots_booking_form+1
EPSS score0.29%
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.39.CVE-2025-49332codepeoplewp_time_slots_booking_form+1EPSS score0.14%
Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.30.CVE-2022-41790codepeoplewp_time_slots_booking_form+1EPSS score0.47%
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.CVE-2022-0389codepeoplewp_time_slots_booking_form+2EPSS score0.60%
The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.CVE-2024-35735codepeoplewp_time_slots_booking_form+1EPSS score0.40%
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.CVE-2024-35734codepeoplewp_time_slots_booking_form+1EPSS score0.31%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10.CVE-2024-33543codepeoplewp_time_slots_booking_form+1EPSS score0.42%
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.CVE-2026-40791codepeoplewp_time_slots_booking_form+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.CVE-2026-48882codepeoplewp_time_slots_booking_form+1EPSS score0.36%
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.CVE-2026-32432codepeoplewp_time_slots_booking_form+1EPSS score0.30%
Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.42.CVE-2023-23895codepeoplewp_time_slots_booking_form+1EPSS score0.71%
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82.CVE-2023-23971codepeoplewp_time_slots_booking_form+1EPSS score0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.