sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical0
High0
Medium2
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2026-11-10

Advanced Appointment Booking & Scheduling - Security Vulnerability (CVE-2026-81422)

The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-registration setting before creating accounts through a publicly accessible shortcode, allowing unauthenticated attackers to register arbitrary user accounts, and be automatically logged in, even when user registration is disabled on the site.

PLUGIN Advanced Appointment Booking & Scheduling

CVE-2026-81422

MEDIUM CVSS 5.3 2026-11-09
Threat Entry Updated 2026-06-17

Advanced Appointment Booking Scheduling - Cross-Site Request Forgery (CSRF) (CVE-2025-57978)

Cross-Site Request Forgery (CSRF) vulnerability in themespride Advanced Appointment Booking & Scheduling advanced-appointment-booking-scheduling allows Cross Site Request Forgery.This issue affects Advanced Appointment Booking & Scheduling: from n/a through

PLUGIN Advanced Appointment Booking Scheduling

CVE-2025-57978

MEDIUM CVSS 4.3 2025-09-22