369 matches found
CVE-2026-61946-Easy-Appointments-IDOR
CVE-2026-61946: 1つの予約IDで他人の予約を上書き 私は、WordPressプラグインEasy Appointmentsに、認証なしの安全でないダイレクトオブジェクト参照（IDOR）を発見しました。公開予約エンドポイントはクエリ文字列からidを受け入れ、その結果のデータをプラグインのデータベースreplaceパスに渡していました。...
Easy Appointments <= 3.12.21 - Information Disclosure
Easy Appointments WordPress plugin = 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/eaappointments/ registered with permissioncallback allowing unrestricted access, letting unauthenticated attackers extract sensitive custom...
CVE-2025-29448
CVE-2025-29448 설명 Easy!Appointments v1.5.1의 예약 로직 결함으로 인해 인증되지 않은 공격자가 과도하게 긴 기간의 약속을 생성하여, 향후 모든 예약 가능 시간을 차단함으로써 서비스 거부를 유발할 수 있습니다. 재현 단계 1. 약속 예약 요청을 가로챕니다. 2. 요청 본문에서 postdataappointmentenddatetime 매개변수를 찾습니다. 3. 매개변수 값을 먼 미래의 날짜로 수정하고 요청을 전송합니다. 4. 애플리케이션이 긴 예약을 수락하여 향후 모든 예약 가능 시간을 차단하고 서비...
exploit-CVE-2022-0482
Easy!Appointments PII 공개 Easy!Appointments --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder All events since default: 2015-01-11 All events until default: today --debug Display arguments -h, --help Show this screen Examples: exploit.rb...
CVE-2022-0482_exploit
CVE-2022-0482 脆弱性の悪用 はじめに このドキュメントでは、Easy!Appointments スケジューリングソフトウェアで特定された重大なセキュリティ脆弱性である CVE-2022-0482 の詳細な分析について概説します。CWE-863 に分類される不適切な認可に関連するこの欠陥により、適切な認証なしに個人を特定できる情報への不正アクセスが可能になり、データの機密性と整合性に重大なリスクをもたらします。 著者 Mija Pilkaite 脆弱性の概要 CVE-2022-0482 は、1.4.3 より前のバージョンの Easy!Appointments...
CVE-2025-50383
CVE-2025-50383 설명 낮은 권한의 인증된 사용자는 악의적인 orderby 매개변수예: orderby=IF1=1,SLEEP5,1가 포함된 조작된 HTTP POST 요청을 전송하여 이 취약점을 악용할 수 있습니다. 이로 인해 시간 기반 블라인드 SQL 인젝션이 발생하여 기본 MySQL 데이터베이스에서 무단 SQL 실행이 가능해지며, 완전한 SQL 인젝션 악용으로 이어집니다. 영향을 받는 엔드포인트 낮은 권한의 인증된 사용자역할: Customers 및 Providers가 악용 가능: 1...
CVE-2026-9232
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handlecustomersajax. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full customer dataset...
CVE-2026-9232
CVE-2026-9232 affects the Easy Appointments plugin for WordPress in all versions up to and including 3.12.27 . A missing authorization check in the handle_customers_ajax (a.k.a. ea_get_customers_ajax) AJAX action allows any authenticated user with contributor-level or higher privileges to extract...
EUVD-2026-83547
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handlecustomersajax. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full customer dataset...
CVE-2026-9232 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handlecustomersajax. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full customer dataset...
CVE-2026-9232 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handlecustomersajax. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full customer dataset...
CVE-2026-9232: Missing Authorization
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.27 via the handlecustomersajax. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the full customer dataset...
PT-2026-95795
Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 3.12.28 Description The plugin is subject to sensitive information exposure through the handle customers ajax function. Authenticated attackers with contributor-level access or higher can extract the complet...
CVE-2026-87965
The Easy Appointments WordPress plugin before 4.0.2.2 does not use an unguessable token to authorize its mail-link appointment cancellation and confirmation action, deriving the token from a hardcoded source-embedded salt and the appointment's creation timestamp, so unauthenticated attackers who...
CVE-2026-87966
The Easy Appointments WordPress plugin before 4.0.2.2 does not perform an ownership or authorization check on its unauthenticated appointment-reservation endpoint before updating an existing appointment identified by a request-supplied id, allowing unauthenticated attackers to overwrite, and...
WordPress Easy Appointments plugin < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation vulnerability
Unauthenticated Appointment Cancellation/Confirmation vulnerability discovered by Morato Antoine in WordPress Plugin Easy Appointments versions 4.0.2.2...
WordPress Easy Appointments plugin 4.0-4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion vulnerability
Unauthenticated Arbitrary Appointment Modification and Deletion vulnerability discovered by blast in WordPress Plugin Easy Appointments versions 4.0-4.0.2.1...
CVE-2026-87966 Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR
The Easy Appointments WordPress plugin before 4.0.2.2 does not perform an ownership or authorization check on its unauthenticated appointment-reservation endpoint before updating an existing appointment identified by a request-supplied id, allowing unauthenticated attackers to overwrite, and...
EUVD-2026-82675
The Easy Appointments WordPress plugin before 4.0.2.2 does not perform an ownership or authorization check on its unauthenticated appointment-reservation endpoint before updating an existing appointment identified by a request-supplied id, allowing unauthenticated attackers to overwrite, and...
CVE-2026-87965 Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token
The Easy Appointments WordPress plugin before 4.0.2.2 does not use an unguessable token to authorize its mail-link appointment cancellation and confirmation action, deriving the token from a hardcoded source-embedded salt and the appointment's creation timestamp, so unauthenticated attackers who...