Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how easyappointments compares to other vendors in security performance

View Risk Score →

Easy!Appointments Easy!AppointmentsCSRF Protection Bypass: Sensitive endpoints accept GET requests, enabling admin account takeover

Risk 56
Severity
8.8
EPSS
0.02%
First published (updated )
CVE-2026-23622

alextselegidis Easy!AppointmentsSQL Injection

Risk 60
Severity
8.1
First published (updated )
CVE-2025-50383

Easy Appointments Easy AppointmentsInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2025-29448

Easy!Appointments Easy!AppointmentsWordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Risk 56
Severity
8.8
EPSS
0.02%
First published (updated )
CVE-2025-31828

Alex Tselegidis EasyAppointmentsCode Injection, XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-57601
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Alex Tselegidis EasyAppointmentsAn issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges…

Risk 86
Severity
9.8
First published (updated )
CVE-2024-57602

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /providers in EasyAppointments < 1.5.0

Risk 79
Severity
8.8
First published (updated )
CVE-2023-3288

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} in EasyAppointments < 1.5.0

Risk 68
Severity
9.6
First published (updated )
CVE-2023-38055

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38054

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38053
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38052

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38051

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} in EasyAppointments < 1.5.0

Risk 66
Severity
9.1
First published (updated )
CVE-2023-38050

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38049

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-38048
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

EasyAppointments EasyAppointmentsA BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} in EasyAppointments < 1.5.0.

Risk 55
Severity
8.5
First published (updated )
CVE-2023-38047

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /services in EasyAppointments < 1.5.0

Risk 44
Severity
7.7
First published (updated )
CVE-2023-3289

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /customers in EasyAppointments < 1.5.0

Risk 26
Severity
5
First published (updated )
CVE-2023-3290

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /secretaries in EasyAppointments < 1.5.0

Risk 44
Severity
7.7
First published (updated )
CVE-2023-3286

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /admins in EasyAppointments < 1.5.0

Risk 82
Severity
9.9
First published (updated )
CVE-2023-3287
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

EasyAppointments EasyAppointmentsA BOLA vulnerability in POST /appointments in EasyAppointments < 1.5.0

Risk 44
Severity
7.7
First published (updated )
CVE-2023-3285

Alex Tselegidis Easy!AppointmentsWordPress Easy!Appointments plugin <= 1.3.3 - Arbitrary File Deletion vulnerability

Risk 37
Severity
6.3
First published (updated )
CVE-2023-32295

Easy!Appointments Easy!Appointments plugin for WordPressEasy!Appointments <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2024-0698

composer/alextselegidis/easyappointmentsAuthorization Bypass Through User-Controlled Key in alextselegidis/easyappointments

Risk 46
Severity
6.3
First published (updated )
CVE-2023-3700

EasyAppointments EasyAppointmentsCross-site Scripting (XSS) - Stored in alextselegidis/easyappointments

Risk 34
Severity
5.4
First published (updated )
CVE-2023-2103
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

EasyAppointments EasyAppointmentsSession Fixation in alextselegidis/easyappointments

Risk 77
Severity
8.8
First published (updated )
CVE-2023-2105

EasyAppointments EasyAppointmentsCross-site Scripting (XSS) - Stored in alextselegidis/easyappointments

Risk 48
Severity
6.8
First published (updated )
CVE-2023-2102

EasyAppointments EasyAppointmentsImproper Access Control in alextselegidis/easyappointments

Risk 34
Severity
5.4
First published (updated )
CVE-2023-2104

EasyAppointments EasyAppointmentsCode Injection in alextselegidis/easyappointments

Risk 48
Severity
6
First published (updated )
CVE-2023-1367

EasyAppointments EasyAppointmentsUse of Hard-coded Credentials in alextselegidis/easyappointments

Risk 86
Severity
9.8
First published (updated )
CVE-2023-1269
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203