WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Easy Appointments

The easiest free WordPress booking plugin. Create beautiful appointment booking forms with flexible scheduling and email notifications.

19Reported vulnerabilities
8.1Highest CVSS score
4.0.1Latest version
10,000+Active installs

What to do now

Update Easy Appointments to 4.0.1 or later. 18 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 14, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-4668 Medium 5.4 0.5% Before 3.11.2 3.11.2 January 23, 2023
CVE-2026-2262 High 7.5 2.4% 0 to 3.12.21 (inclusive) 3.12.22 April 18, 2026
CVE-2026-8789 High 8.1 0.2% 3.12.27 and earlier 3.12.28 July 23, 2026
CVE-2025-49398 Medium 6.5 0.2% 3.12.14 and earlier 3.12.14.1 September 9, 2025
CVE-2022-36424 Medium 6.3 0.3% 3.11.9 and earlier 3.11.10 May 5, 2023
CVE-2017-15812 Medium 6.1 0.7% 1.11.7 and earlier 1.12.0 October 23, 2017
CVE-2024-2842 Medium 5.4 0.3% Before 3.11.9 3.11.9 March 29, 2024
CVE-2026-14224 Medium 5.4 0.1% 0 up to (but not including) 3.12.28 3.12.28 July 29, 2026
CVE-2026-61946 Medium 5.3 0.3% 3.12.27 and earlier 3.12.28 July 16, 2026
CVE-2026-39513 Medium 5.3 0.3% 3.12.21 and earlier 3.12.22 April 13, 2026
CVE-2023-30748 Medium 4.4 0.3% 3.11.0 and earlier 3.11.1 April 14, 2023
CVE-2026-19406 Medium 4.3 0.2% Before 4.0.1 4.0.1 August 21, 2026
CVE-2026-14226 Medium 4.3 0.2% 0 up to (but not including) 3.12.28 3.12.28 July 30, 2026
CVE-2026-14223 Medium 4.3 0.2% 0 up to (but not including) 3.12.28 3.12.28 July 30, 2026
CVE-2026-14221 Medium 4.3 0.2% 3.12.26 and earlier — July 30, 2026
CVE-2026-11992 Medium 4.3 0.5% 0 to 3.12.27 (inclusive) 3.12.28 July 10, 2026
CVE-2024-2844 Medium 4.3 0.4% Before 3.11.19 3.11.19 March 29, 2024
CVE-2026-14222 Low 3.8 0.2% 0 up to (but not including) 3.12.28 3.12.28 July 30, 2026
CVE-2026-14188 Low 2.7 0.2% 0 up to (but not including) 3.12.28 3.12.28 July 30, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.