easy appointments

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 29, 2024 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

5.8

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

30/100

low

📈 1 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

Infoleak

Code Injection

Input Validation

Most Affected Products

1. Easy Appointments Easy Appointments2

2. Easy-appointments Easy Appointments Wordpress2

3. Easy Appointments WordPress plugin1

4. Easy Appointments Easy Appointments WordPress plugin1

5. Easy Appointments Easy Appointments (WordPress plugin)1

Recent Vulnerabilities

See more →

CVE-2026-19406

CVSS 2.7low

Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing

Aug 19, 2026🔧 No Patch

CVE-2026-14224

CVSS 5.4medium

Easy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOR

Jul 29, 2026🔧 No Patch

CVE-2026-39513

CVSS 7.5high

WordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerability

Jun 15, 2026🔧 No Patch

CVE-2025-49398

CVSS 6.5medium

WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability

Nov 6, 2025🔧 No Patch

CVSS 4.3EPSS 0%medium

Easy Appointments <= 3.11.18 - Insufficient Authorization

Mar 29, 2024

CVE-2024-2842

CVSS 6.4EPSS 0%medium

Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting