CVE-2025-64261

CVE-2025-64261 affects the WordPress plugin Appointment Booking Calendar (versions =1.3.95) or apply vendor patch. Connected sources corroborate the same vulnerability entry and remediation status.

PT-2025-46797

Name of the Vulnerable Software and Affected Versions Appointment Booking Calendar versions through 1.3.95 Description A missing authorization issue exists in codepeople Appointment Booking Calendar appointment-booking-calendar, allowing exploitation of incorrectly configured access control...

CVE-2025-64261: Missing Authorization

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

PT-2025-46877

Name of the Vulnerable Software and Affected Versions SourceCodester Patients Waiting Area Queue Management System version 1.0 Description A flaw exists in the software that allows for remote SQL injection. The issue is located in the getPatientAppointment function within the /php/api patient...

WordPress Plugin Appointment Booking Calendar has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

SourceCodester: Patients Waiting Area Queue SQL Injection Vulnerability

SourceCodester Patients Waiting Area Queue is an open source patient waiting area queuing system from SourceCodester. SourceCodester Patients Waiting Area Queue version 1.0 has a SQL injection vulnerability, the vulnerability stems from the improper handling of the appointmentID parameter in the...

EUVD-2025-119994

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

WordPress plugin Booking Calendar | Appointment Booking | Bookit security vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-12633: Missing Authorization

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/bookit/v1/commerce/stripe/return' REST API Endpoint in all versions up to, and including, 2.5.0. This makes it possible fo...

CVE-2025-12787: Use of Insufficiently Random Values

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhbmeetingformsubmitcallback" function using insufficiently random values to generate...

WordPress Easy Appointments plugin cross-site scripting vulnerability

WordPress Easy Appointments plugin is a free WordPress appointment management plugin, mainly used to create and manage service appointment system, support multi-location, multi-service, multi-staff appointment function. A cross-site scripting vulnerability exists in the WordPress Easy Appointment...

CVE-2025-12788: Client-Side Enforcement of Server-Side Security

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment verification to unauthenticated payment bypass in all versions up to, and including, 1.1.27. This is due to the plugin accepting client-controlled payment confirmation data in the...

EUVD-2025-38258

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

CVE-2025-63718

A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...

PT-2025-45480

Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...

SourceCodester PQMS security vulnerabilities

SourceCodester PQMS is an open source product quality management system from SourceCodester. A security vulnerability exists in SourceCodester PQMS version 1.0, which stems from improper cleanup of the appointmentID parameter in the apipatientschedule.php endpoint, which could lead to the executi...

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

CVE-2025-11664

Campcodes Online Beauty Parlor Management System 1.0 is affected. The vulnerability is a SQL injection in the /admin/search-appointment.php file, caused by manipulation of the searchdata argument in an unknown function. It is a network-based issue (remote exploitation) with publicly disclosed exp...

CVE-2025-11664 Campcodes Online Beauty Parlor Management System search-appointment.php sql injection

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...