Vulnerabilities > Codepeople > High

DATE CVE VULNERABILITY TITLE RISK
2024-06-09 CVE-2024-33543 Missing Authorization vulnerability in Codepeople WP Time Slots Booking Form
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.
network
low complexity
codepeople CWE-862
7.5
2024-01-17 CVE-2022-41790 Missing Authorization vulnerability in Codepeople WP Time Slots Booking Form
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.
network
low complexity
codepeople CWE-862
8.8
2022-11-18 CVE-2022-43482 Missing Authorization vulnerability in Codepeople Appointment Booking Calendar
Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.
network
low complexity
codepeople CWE-862
8.8
2019-08-22 CVE-2016-10916 SQL Injection vulnerability in Codepeople Appointment Booking Calendar
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.
network
low complexity
codepeople CWE-89
7.5
2019-08-21 CVE-2016-10909 SQL Injection vulnerability in Codepeople Booking Calendar Contact Form
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.
network
low complexity
codepeople CWE-89
7.5
2015-09-29 CVE-2015-7319 SQL Injection vulnerability in Codepeople Appointment Booking Calendar
SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updating the username.
network
low complexity
codepeople CWE-89
7.5