Codepeople Wp Time Slots Booking Form — known CVE vulnerabilities

Every CVE whose affected-product data names Codepeople Wp Time Slots Booking Form, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-33543 — CVSS 7.5 (high): Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a…
• CVE-2024-35734 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots…
• CVE-2023-23971 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.
• CVE-2024-35735 — CVSS 5.3 (medium): Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a…
• CVE-2022-0389 — CVSS 4.8 (medium): The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high privilege users to…
• CVE-2023-23895 — CVSS 4.7 (medium): Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control…
• CVE-2022-41790 — CVSS 4.3 (medium): Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a…