Tenteeglobal vulnerabilities
We track 3 vulnerabilities in Tenteeglobal products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.
Latest Tenteeglobal vulnerabilities
- 9.8 Critical severity
Instant Appointment: Unrestricted Upload of File with Dangerous Type
The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2. This makes it possible for unauthenticated a
- 7.1 High severity
Instant Appointment: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tenteeglobal Instant Appointment instant-appointment allows Reflected XSS.This issue affects Instant Appointment: from n/a through <= 1.2.
- 9.3 Critical severity
Instant Appointment: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tenteeglobal Instant Appointment instant-appointment allows SQL Injection.This issue affects Instant Appointment: from n/a through <= 1.2.