Pricing
Case studies
Login
Start trial
Appointment Hour Booking
codepeople
Developer
1.5.96
Latest version
10,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
15 patched
1 Mitigation rules
Unauthenticated Booking Capacity Bypass vulnerability
< 1.5.95
2 days ago
Unauthenticated Booking Price Manipulation via tcost Parameter vulnerability
< 1.5.88
26/08/2026
Broken Access Control vulnerability
<= 1.5.94
18/08/2026
Cross Site Scripting (XSS) vulnerability
<= 1.5.86
23/07/2026
Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration vulnerability
<= 1.5.60
28/01/2026
Captcha Bypass vulnerability
<= 1.4.56
22/04/2024
Broken Access Control vulnerability
<= 1.4.23
11/10/2023
CSV Injection vulnerability
<= 1.3.72
29/11/2022
Unauth. iFrame Injection vulnerability via Appointment Form
<= 1.3.72
29/11/2022
CAPTCHA Bypass vulnerability
<= 1.3.72
29/11/2022
Missing Authorization vulnerability
<= 1.3.71
30/10/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 1.3.55
23/05/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 1.3.16
10/09/2021
Stored Cross-Site Scripting (XSS) vulnerability
<= 1.3.15
06/09/2021
Stored Cross-Site Scripting (XSS) vulnerability
<= 1.1.45
16/07/2019