Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin vulnerabilities
7 known vulnerabilities in Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin from Croixhaug. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Neutralization of Special Elements used in an SQL Command
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'append_where_sql' parameter in all versions up to, and including, 1.6.11.8 due to insufficient escaping
- 7.5 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Neutralization of Special Elements used in an SQL Command
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all versions up to, and including, 1.6.10.0 due to insufficient escaping on the user supplied param
- 7.5 High severity
Appointment Booking Calendar — Simply Schedule…: Missing Authorization
The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized access of sensitive data in all versions up to and including 1.6.9.29. This is due to two compounding weaknesses: (1) a non-user-bound `public_no
- 7.5 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Neutralization of Special Elements used in an SQL Command
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and including, 1.6.9.27. This is due to the `db_where_conditions` method in the `TD_DB_Model` class
- 7.5 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Neutralization of Special Elements used in an SQL Command
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection via the `order` and `append_where_sql` parameters in all versions up to, and including, 1.6.9.9 due to insufficient escapin
- 7.3 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Control of Generation of Code
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.8.5. This is due to the software allowing users to execute an action th
- 8.8 High severity
Appointment Booking Calendar — Simply Schedule…: Improper Neutralization of Special Elements used in an SQL Command
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the customer_id parameter in all versions up to, and including, 1.6.7.7 due to insufficient escaping on the user supplied par