Advisories · Technology

codepeople Appointment Hour Booking.

Every CVE that names codepeople Appointment Hour Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66679 CVE record

CVSS 6.5 Medium

WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
- codepeople Appointment Hour Booking
- CWE-1284
Not analysed yet 18 Aug 2026
CVE-2026-65514 CVE record

CVSS 6.5 Medium

WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
- codepeople Appointment Hour Booking
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2023-45649 CVE record

CVSS 5.3 Medium

WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability
- codepeople Appointment Hour Booking
- Broken access control
Not analysed yet 2 Jan 2025
CVE-2024-32720 CVE record

CVSS 5.3 Medium

WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
- CodePeople Appointment Hour Booking
- Authentication bypass
Not analysed yet 17 May 2024