Codepeople
Codepeople WP Time Slots Booking Form: vulnerabilidades y CVE
Codepeople WP Time Slots Booking Form tiene 12 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses4
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-48882 | Alta (8.5) | 0.36% | — | 15 jun 2026 | Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. |
| CVE-2026-40791 | Alta (7.1) | 0.25% | — | 15 jun 2026 | Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. |
| CVE-2026-32432 | Media (5.3) | 0.29% | — | 13 mar 2026 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking… |
| CVE-2025-68569 | Media (6.5) | 0.29% | — | 24 dic 2025 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking… |
| CVE-2025-49332 | Media (4.3) | 0.14% | — | 6 jun 2025 | Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <=… |
| CVE-2023-23895 | Alta (7.2) | 0.71% | — | 9 dic 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82. |
| CVE-2024-35735 | Crítica (9.8) | 0.40% | — | 10 jun 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11. |
| CVE-2024-33543 | Alta (7.5) | 0.42% | — | 9 jun 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06. |
| CVE-2024-35734 | Media (6.1) | 0.31% | — | 8 jun 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from… |
| CVE-2022-41790 | Alta (8.8) | 0.47% | — | 17 ene 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76. |
| CVE-2023-23971 | Media (4.8) | 0.39% | — | 6 abr 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions. |
| CVE-2022-0389 | Media (4.8) | 0.60% | — | 7 mar 2022 | The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.