Product by CodePeople

    Appointment Booking Calendar

    16 known vulnerabilities in Appointment Booking Calendar (CodePeople), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Appointment Booking Calendar (CodePeople)
    HighCVE-2020-9372

    Appointment Booking Calendar: Remote Code Execution

    		7.8
    CriticalCVE-2016-10916

    Appointment Booking Calendar: SQL Injection

    		9.8
    MediumCVE-2020-9371

    Appointment Booking Calendar: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2019-14791

    Appointment Booking Calendar: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2024-12274

    BookingPress < 1.1.23 - Unauthenticated Export File Download

    		7.5
    MediumCVE-2026-111727

    CodePeople Appointment Booking Calendar: Cross-site Scripting

    		6.4
    HighCVE-2024-0856

    Booking Calendar < 1.3.83 - CSRF appointment scheduling

    		8.8
    Not ratedCVE-2015-7319

    Appointment Booking Calendar: SQL Injection

    		—
    Not ratedCVE-2015-7320

    Appointment Booking Calendar: Cross-Site Scripting (XSS)

    		—
    HighCVE-2025-46241

    WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability

    		8.2
    MediumCVE-2026-12113

    CodePeople Appointment Booking Calendar: Missing Authorization

    		4.3
    CriticalCVE-2025-46247

    WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability

    		5.3
    MediumCVE-2026-12111

    CodePeople Appointment Booking Calendar: Exposure of Sensitive Information to an Unauthorized Actor

    		4.3
    MediumCVE-2025-13317

    CodePeople Appointment Booking Calendar: Missing Authorization

    		5.3
    HighCVE-2022-43482

    WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

    		4.3
    MediumCVE-2025-64261

    WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability

    		5.4

    All products by CodePeople