Vulnerabilities > Dwbooster > Appointment Hour Booking > 1.3.69

DATE CVE VULNERABILITY TITLE RISK
2022-11-29 CVE-2022-4034 Improper Neutralization of Formula Elements in a CSV File vulnerability in Dwbooster Appointment Hour Booking
The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72.
local
low complexity
dwbooster CWE-1236
7.8
2022-11-29 CVE-2022-4035 Cross-site Scripting vulnerability in Dwbooster Appointment Hour Booking
The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tags possible.
network
low complexity
dwbooster CWE-79
6.1
2022-11-29 CVE-2022-4036 Inadequate Encryption Strength vulnerability in Dwbooster Appointment Hour Booking
The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72.
network
low complexity
dwbooster CWE-326
5.3
2022-11-18 CVE-2022-41692 Missing Authorization vulnerability in Dwbooster Appointment Hour Booking
Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
network
low complexity
dwbooster CWE-862
8.8