easyappointments

Products

ProductCVEsExploitedLatest
Easy Appointments6–Sep 19, 2026

Exploited and recent CVEs

  • CVE-2026-9232 Medium 6.5 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action 0.5%
  • CVE-2026-8789 High 8.1 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion 0.4%
  • CVE-2026-11992 Medium 4.3 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation 0.5%
  • CVE-2026-2262 High 7.5 Easy Appointments <= 3.12.21 - Unauthenticated Sensitive Information Exposure via REST API 2.4%
  • CVE-2024-2844 Medium 4.3 Easy Appointments <= 3.11.18 - Insufficient Authorization 0.4%
  • CVE-2024-2842 Medium 6.4 Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%