Skip to content
OpenAdvisories

Vendor

easyappointments

6 known vulnerabilities.

Products

Easy Appointments 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-8789

    Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion

    The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the `ea_delete_multiple_connections` AJAX action in all versions up to, and including, 3.12.27. T…

    easyappointments Easy Appointments Web / CMS
  • High 7.5
    CVE-2026-2262 Scanner template

    Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API

    The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.21 via the `/wp-json/wp/v2/eablocks/ea_appointments/` REST API endpoint. This is due to the endpoint being registered with `'…

    easyappointments Easy Appointments Web / CMS