Product by CodePeople
Wp Time Slots Booking Form
12 known vulnerabilities in Wp Time Slots Booking Form (CodePeople), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-48882 | WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability | 8.5 | |
| High | CVE-2026-40791 | WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2023-23895 | WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability | 4.7 | |
| High | CVE-2024-33543 | WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability | 7.5 | |
| Medium | CVE-2025-68569 | WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability | 6.5 | |
| High | CVE-2024-35734 | WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2022-0389 | WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2026-32432 | WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability | 5.3 | |
| Critical | CVE-2024-35735 | WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2023-23971 | WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS) | 5.9 | |
| High | CVE-2022-41790 | WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control | 4.3 | |
| Medium | CVE-2025-49332 | CodePeople WP Time Slots Booking Form: Cross-Site Request Forgery (CSRF) | 4.3 |