PT-2022-25353 · WordPress · Appointment Hour Booking Plugin

Name of the Vulnerable Software and Affected Versions: Appointment Hour Booking Plugin for WordPress versions up to, and including, 1.3.72 Description: The issue allows unauthenticated attackers to embed untrusted input into content during booking creation, which may be exported as a CSV file whe...

PT-2022-25362 · WordPress · Appointment Hour Booking

Name of the Vulnerable Software and Affected Versions: Appointment Hour Booking plugin for WordPress versions up to, and including, 1.3.72 Description: The issue is related to a CAPTCHA bypass due to the use of an insufficiently strong hashing algorithm on the CAPTCHA secret. This secret is also...

CVE-2022-4034: Improper Neutralization of Formula Elements in a CSV File

The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...

CVE-2022-4036: Guessable CAPTCHA

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...

CVE-2022-4035: Improper Neutralization of Input During Web Page Generation

The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tags possible. This makes it possible for...

PT-2022-25355 · WordPress · Appointment Hour Booking

Name of the Vulnerable Software and Affected Versions: Appointment Hour Booking plugin for WordPress versions up to, and including, 1.3.72 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject iFrame tags via the email...

WordPress plugin Appointment Hour Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An iFrame injection...

Unspecified vulnerability in WordPress Appointment Booking Calendar plugin

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-43482

Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...

CVE-2022-43482

Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...

Authorization

Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...

CVE-2022-41692

Missing Authorization vulnerability in Appointment Hour Booking plugin = 1.3.71 on WordPress...

CVE-2022-41692

Missing Authorization vulnerability in Appointment Hour Booking plugin = 1.3.71 on WordPress...

Authorization

Missing Authorization vulnerability in Appointment Hour Booking plugin = 1.3.71 on WordPress...

CVE-2022-43482

CVE-2022-43482 affects the WordPress Appointment Booking Calendar plugin (versions

CVE-2022-43482 WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...

CVE-2022-43482 WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

Missing Authorization vulnerability in Appointment Booking Calendar plugin = 1.3.69 on WordPress...

CVE-2022-41692

CVE-2022-41692 : WordPress Appointment Hour Booking plugin (versions

CVE-2022-41692 WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

Missing Authorization vulnerability in Appointment Hour Booking plugin = 1.3.71 on WordPress...

CVE-2022-41692 WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

Missing Authorization vulnerability in Appointment Hour Booking plugin = 1.3.71 on WordPress...