Vulnerabilities / Easy Appointments
Easy Appointments vulnerabilities
Advisories WPSec published for Easy Appointments. Other sources may list more. Its attack surface: Easy Appointments on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1459 | Easy Appointments <= 4.0.3 - Unauthenticated Authentication Bypass via Forgeable Legacy Appointment Action Token | Low 3.7 | 4.0.4 |
| 2026-10-22 | WPSEC-2026-1458 | Easy Appointments <= 4.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Customer Data Exposure via Booking Email | Medium 4.3 | 4.0.4 |
License: CC BY 4.0