Lucene search
+L

192 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.9 views

CVE-2023-33561

Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords...

9.8CVSS7.2AI score0.00825EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:10 a.m.11 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS5.1AI score0.00691EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:2 a.m.11 views

CVE-2023-33562

User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

9.8CVSS7AI score0.0064EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:53 a.m.10 views

CVE-2022-41790

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...

8.8CVSS8AI score0.00466EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:39 a.m.21 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS6.9AI score0.00417EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:14 p.m.15 views

CVE-2024-35734

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

7.1CVSS6.7AI score0.00308EPSS
Exploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.6 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS5.8AI score0.00691EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.24 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS0.00691EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.22 views

CVE-2023-23895 WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through = 1.1.82...

4.7CVSS5.8AI score0.00691EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.5 views

PT-2024-12011 · Codepeople · Codepeople Wp Time Slots Booking Form

Name of the Vulnerable Software and Affected Versions: CodePeople WP Time Slots Booking Form versions 1.1.82 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

7.2CVSS6.9AI score0.00691EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.5 views

WordPress plugin WP Time Slots Booking Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...

7.2CVSS6.7AI score0.00691EPSS
Exploits0References1
OSV
OSV
added 2024/10/21 12:15 p.m.8 views

AZL-50722 CVE-2024-47683 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Recompute DSC Params if no Stream on Link why Encounter NULL pointer dereference uner mst + dsc setup. BUG: kernel NULL pointer dereference, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1 PREEMPT SMP NOP...

5.5CVSS6.7AI score0.00234EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/12 12:0 a.m.11 views

PT-2024-32737

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the drm/amd/display component. This occurs when there is an attempt to recompute DSC parameters without a...

5.5CVSS5.5AI score0.00234EPSS
Exploits0
WPVulnDB
WPVulnDB
added 2024/06/12 12:0 a.m.20 views

WP Time Slots Booking Form < 1.2.11 - Unauthenticated Stored Cross-Site Scripting

Description The WP Time Slots Booking Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

7.1CVSS6AI score0.00308EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/06/12 12:0 a.m.15 views

WP Time Slots Booking Form < 1.2.12 - Missing Authorization

Description The WP Time Slots Booking Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the datamanagement function in versions up to, and including, 1.2.11. This makes it possible for unauthenticated attackers to view slot data...

9.8CVSS6.6AI score0.00402EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/06/10 8:15 a.m.34 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS0.00402EPSS
Exploits0References1
OSV
OSV
added 2024/06/10 8:15 a.m.3 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/10 7:43 a.m.31 views

CVE-2024-35735 WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

5.3CVSS0.00402EPSS
Exploits0References1
CVE
CVE
added 2024/06/10 7:43 a.m.58 views

CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...

9.8CVSS7.3AI score0.00402EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.6 views

WordPress plugin WP Time Slots Booking Form security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...

9.8CVSS6.7AI score0.00402EPSS
Exploits0References2
Rows per page
Query Builder