Unknown Easy Appointments

• CVE-2026-87966 Medium 5.3 Easy Appointments 4.0 - 4.0.2.1 - Unauthenticated Arbitrary Appointment Modification and Deletion via IDOR 0.3%
• CVE-2026-87965 Medium 4.8 Easy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link Token 0.3%
• CVE-2026-19406 Low 2.7 Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing 0.3%
• CVE-2026-14225 Low 2.7 Easy Appointments < 3.12.28 - Contributor+ Shortcode Allowlist Bypass 0.3%
• CVE-2026-14226 Medium 4.3 Easy Appointments < 3.12.28 - Subscriber+ Sensitive Information Disclosure via REST Appointments Listing 0.3%
• CVE-2026-14223 Medium 4.3 Easy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOR 0.3%
• CVE-2026-14222 Low 3.8 Easy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing Authorization 0.3%
• CVE-2026-14221 Low 3.8 Easy Appointments <= 4.0 - Contributor+ Appointment Data Disclosure & Modification via Missing Authorization 0.3%
• CVE-2026-14188 Low 2.7 Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure 0.3%
• CVE-2026-14224 Medium 5.4 Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR 0.2%
• CVE-2022-4668 Medium 5.4 Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode 0.5%