Advisories · Technology

codepeople WP Time Slots Booking Form.

Every CVE that names codepeople WP Time Slots Booking Form among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-48882 CVE record

CVSS 8.5 High

WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
- codepeople WP Time Slots Booking Form
- SQL injection
Not analysed yet 15 Jun 2026
CVE-2026-40791 CVE record

CVSS 7.1 High

WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability
- codepeople WP Time Slots Booking Form
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2026-32432 CVE record

CVSS 5.3 Medium

WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
- codepeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2025-68569 CVE record

CVSS 6.5 Medium

WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability
- codepeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 24 Dec 2025
CVE-2025-49332 CVE record

CVSS 4.3 Medium

WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability
- codepeople WP Time Slots Booking Form
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2023-23895 CVE record

CVSS 4.7 Medium

WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability
- CodePeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 9 Dec 2024
CVE-2024-35735 CVE record

CVSS 5.3 Medium

WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability
- CodePeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 10 Jun 2024
CVE-2024-33543 CVE record

CVSS 7.5 High

WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
- CodePeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 9 Jun 2024
CVE-2024-35734 CVE record

CVSS 7.1 High

WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
- CodePeople WP Time Slots Booking Form
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2024
CVE-2022-41790 CVE record

CVSS 4.3 Medium

WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
- CodePeople WP Time Slots Booking Form
- Broken access control
Not analysed yet 17 Jan 2024
CVE-2023-23971 CVE record

CVSS 5.9 Medium

WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
- CodePeople WP Time Slots Booking Form
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2023