CodePeople Appointment Booking Calendar

• CVE-2026-111727 Medium 6.4 Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter 0.2%
• CVE-2026-12113 Medium 4.3 Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure 0.4%
• CVE-2026-12111 Medium 4.3 Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter 0.3%
• CVE-2025-13317 Medium 5.3 Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter 0.3%
• CVE-2025-64261 Medium 5.4 WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability 0.2%
• CVE-2025-46247 Medium 5.3 WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability 0.4%
• CVE-2025-46241 High 8.2 WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability 0.2%