Skip to content
OpenAdvisories

Product · Easy Appointments

Easy Appointments

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-81798

    WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1.

    Easy Appointments Easy Appointments
  • High 8.1
    CVE-2026-8789

    Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion

    The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the `ea_delete_multiple_connections` AJAX action in all versions up to, and including, 3.12.27. T…

    Easy Appointments Easy Appointments Web / CMS
  • High 7.5
    CVE-2026-39513

    WordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Easy Appointments <= 3.12.21 versions.

    Easy Appointments Easy Appointments
  • High 7.5
    CVE-2026-2262 Scanner template

    Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API

    The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.21 via the `/wp-json/wp/v2/eablocks/ea_appointments/` REST API endpoint. This is due to the endpoint being registered with `'…

    Easy Appointments Easy Appointments Web / CMS