easy appointments

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 29, 2024 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

5.8

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

30/100

low

🆕 1Fresh (<7d)📈 2 in Last 30 Days

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

Input Validation

XSS

Code Injection

Most Affected Products

1. Easy Appointments WordPress plugin2

2. Easy Appointments Easy Appointments2

3. Easy-appointments Easy Appointments Wordpress2

4. Easy Appointments Easy Appointments (WordPress plugin)1

5. WordPress Easy Appointments1

Recent Vulnerabilities

See more →

CVE-2026-14225

CVSS 2.7low

Easy Appointments <= 3.12.26 - Contributor+ Shortcode Allowlist Bypass

8/6/2026🔧 No Patch

CVE-2026-14224

CVSS 5.4medium

Easy Appointments <= 3.12.26 - Subscriber+ Cross-User Appointment Data Modification via IDOR

7/29/2026🔧 No Patch

CVE-2026-39513

CVSS 7.5high

WordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerability

6/15/2026🔧 No Patch

CVE-2025-49398

CVSS 6.5medium

WordPress Easy Appointments plugin <= 3.12.14 - Content Injection vulnerability

CVSS 4.3EPSS 0%medium

Easy Appointments <= 3.11.18 - Insufficient Authorization

3/29/2024

CVE-2024-2842

CVSS 6.4EPSS 0%medium

Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting