# codepeople WP Time Slots Booking Form.

Every CVE that names codepeople WP Time Slots Booking Form among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-48882.md)
  `CVE-2026-48882` · CVE record: codepeople WP Time Slots Booking Form · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: SQL injection
- [WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-40791.md)
  `CVE-2026-40791` · CVE record: codepeople WP Time Slots Booking Form · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-32432.md)
  `CVE-2026-32432` · CVE record: codepeople WP Time Slots Booking Form · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2025-68569.md)
  `CVE-2025-68569` · CVE record: codepeople WP Time Slots Booking Form · CVSS 6.5 Medium · Not analysed yet · Published 24 Dec 2025 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49332.md)
  `CVE-2025-49332` · CVE record: codepeople WP Time Slots Booking Form · CVSS 4.3 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2023-23895.md)
  `CVE-2023-23895` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 4.7 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-35735.md)
  `CVE-2024-35735` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 5.3 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-33543.md)
  `CVE-2024-33543` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2024 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-35734.md)
  `CVE-2024-35734` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 7.1 High · Not analysed yet · Published 8 Jun 2024 · Tags: Cross-site scripting (XSS)
- [WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control](https://agentprime.io/advisories/CVE-2022-41790.md)
  `CVE-2022-41790` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 4.3 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Broken access control
- [WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-23971.md)
  `CVE-2023-23971` · CVE record: CodePeople WP Time Slots Booking Form · CVSS 5.9 Medium · Not analysed yet · Published 6 Apr 2023 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=codepeople-wp-time-slots-booking-form>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/codepeople-wp-time-slots-booking-form/>. Everything for agents: <https://agentprime.io/llms.txt>.