How many codepeople WP Time Slots Booking Form CVEs are in CISA KEV?

None of codepeople WP Time Slots Booking Form's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for codepeople WP Time Slots Booking Form vulnerabilities?

Yes — 1 of codepeople WP Time Slots Booking Form's CVEs have a known public exploit.

Which versions of codepeople WP Time Slots Booking Form are affected?

39 distinct codepeople WP Time Slots Booking Form versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in codepeople WP Time Slots Booking Form CVEs?

codepeople WP Time Slots Booking Form's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

What is the average severity of codepeople WP Time Slots Booking Form CVEs?

The average CVSS base score across codepeople WP Time Slots Booking Form's scored CVEs is 6.9.

RadicalNotion.AI

Log in Create an account

codepeople

12 CVEs

codepeople WP Time Slots Booking Form Vulnerabilities

Name: codepeople WP Time Slots Booking Form vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WP Time Slots Booking Form by codepeople.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.9

Avg CVSS

2022–2026

Last updated June 15, 2026

Overview

codepeople WP Time Slots Booking Form has 12 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

Severity and exploitation

How the CVSS severity of codepeople WP Time Slots Booking Form's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High6

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of codepeople WP Time Slots Booking Form's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of codepeople WP Time Slots Booking Form's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every codepeople WP Time Slots Booking Form version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.1.631 CVE
< 1.1.831 CVE
< 1.2.071 CVE
< 1.2.111 CVE
< 1.2.121 CVE
<= 1.1.761 CVE
<= 1.1.811 CVE
<= 1.1.821 CVE
<= 1.2.061 CVE
<= 1.2.101 CVE
<= 1.2.111 CVE
<= 1.2.301 CVE
<= 1.2.391 CVE
<= 1.2.421 CVE
<= 1.2.461 CVE
<= 1.2.501 CVE
>= 1.1.771 CVE
>= 1.1.821 CVE
>= 1.1.831 CVE
>= 1.2.071 CVE
>= 1.2.111 CVE
>= 1.2.121 CVE
>= 1.2.311 CVE
>= 1.2.401 CVE
>= 1.2.431 CVE
>= 1.2.471 CVE
>= 1.2.511 CVE

Fixed in

1.1.631 CVE
1.1.771 CVE
1.1.821 CVE
1.1.831 CVE
1.2.071 CVE
1.2.111 CVE
1.2.121 CVE
1.2.311 CVE
1.2.401 CVE
1.2.431 CVE
1.2.471 CVE
1.2.511 CVE

Find a version

12 CVEs

Sort

WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
CVE-2026-48882
Patch
CWE-89
High · CVSS 8.5
EPSS 0.4% (28th pct)2026-06-15
WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40791
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (15th pct)2026-06-15
WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
CVE-2026-32432
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.3% (22th pct)2026-03-13
WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability
CVE-2025-68569
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.3% (21th pct)2025-12-24
WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49332
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (3th pct)2025-06-06
WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability
CVE-2023-23895
Patch
CWE-862
High · CVSS 7.2
EPSS 0.7% (53th pct)2024-12-09
WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability
CVE-2024-35735
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.4% (33th pct)2024-06-10
WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
CVE-2024-33543
Patch
CWE-862
High · CVSS 7.5
EPSS 0.4% (34th pct)2024-06-09
WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2024-35734
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (22th pct)2024-06-08
WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
CVE-2022-41790
Patch
CWE-862
High · CVSS 8.8
EPSS 0.5% (39th pct)2024-01-17
WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-23971
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.4% (32th pct)2023-04-06
Medium vulnerability · 2022-03-07
CVE-2022-0389
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (47th pct)2022-03-07

Common weakness types

The CWE weakness categories most often found in codepeople WP Time Slots Booking Form CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many codepeople WP Time Slots Booking Form CVEs were published each year.

2022

1

2023

1

2024

5

2025

2

2026

3

Other codepeople products

Browse vulnerabilities for other products by codepeople.

Calculated Fields Form17 CVEs appointment booking calendar15 CVEs Contact Form Email13 CVEs Booking Calendar Contact Form12 CVEs cp contact form with paypal7 CVEs polls cp7 CVEs Appointment Hour Booking – Booking Calendar5 CVEs CP Multi View Event Calendar5 CVEs

All codepeople vulnerabilities

Frequently asked questions

Common questions about codepeople WP Time Slots Booking Form vulnerabilities.

How many CVEs does codepeople WP Time Slots Booking Form have?: codepeople WP Time Slots Booking Form has 12 published CVE records since 2022.
How many codepeople WP Time Slots Booking Form CVEs are in CISA KEV?: None of codepeople WP Time Slots Booking Form's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for codepeople WP Time Slots Booking Form vulnerabilities?: Yes — 1 of codepeople WP Time Slots Booking Form's CVEs have a known public exploit.
Which versions of codepeople WP Time Slots Booking Form are affected?: 39 distinct codepeople WP Time Slots Booking Form versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in codepeople WP Time Slots Booking Form CVEs?: codepeople WP Time Slots Booking Form's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical codepeople WP Time Slots Booking Form vulnerabilities are there?: codepeople WP Time Slots Booking Form has 1 critical and 6 high-severity CVEs.
What is the average severity of codepeople WP Time Slots Booking Form CVEs?: The average CVSS base score across codepeople WP Time Slots Booking Form's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track codepeople WP Time Slots Booking Form vulnerabilities

Get an alert for each new codepeople WP Time Slots Booking Form CVE, with AI-written analysis and remediation steps.

Create an account See pricing