Skip to content
OpenAdvisories

Product · WPMU DEV

Appointments

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-20206

    Appointments <= 2.2.1 - Unauthenticated PHP Object Injection

    The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the `wpmudev_appointments` cookie. This allows unauthenticated attackers to inject a PHP Object. At…

    WPMU DEV Appointments Web / CMS