WP Time Slots Booking Form

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Time Slots Booking Form

Information

Software Type Plugin
Software Slug wp-time-slots-booking-form (view on wordpress.org)
Software Status Active
Software Author codepeople
Software Website wptimeslot.dwbooster.com
Software Downloads 138,239
Software Active Installs 1,000
Software Record Last Updated July 21, 2026

13 Vulnerabilities

Submit a Vulnerability
WP Time Slots Booking Form <= 1.2.50 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2026-48882
Jun 2, 2026
Researcher: xwii
WP Time Slots Booking Form <= 1.2.46 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-40791
Apr 23, 2026
Researcher: Daniel Wade
Time Slots Booking Form <= 1.2.42 - Missing Authorization
5.3
CVE-2026-32432
Mar 2, 2026
Researcher: Nguyen Ba Khanh
Time Slots Booking Form <= 1.2.39 - Missing Authorization
4.3
CVE-2025-68569
Dec 20, 2025
Researcher: daroo
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery
4.3
CVE-2025-49332
Jun 5, 2025
Researcher: Jang Jeong Ahn (Jhanks)
WP Time Slots Booking Form <= 1.2.11 - Missing Authorization
5.3
CVE-2024-35735
Jun 6, 2024
Researcher: Manab Jyoti Dowarah
WP Time Slots Booking Form <= 1.2.10 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-35734
Jun 6, 2024
Researcher: Manab Jyoti Dowarah
WP Time Slots Booking Form <= 1.2.06 - Unauthenticated Price Manipulation
5.3
CVE-2024-33543
Apr 25, 2024
Researcher: Joshua Chan
WP Time Slots Booking Form <= 1.1.76 - Cross-Site Request Forgery to Feedback Submission
4.3
CVE-2022-41790
Feb 28, 2023
Researcher: István Márton
WP Time Slots Booking Form <= 1.1.76 - Missing Authorization to Feedback Submission
4.3
CVE-2022-41790
Feb 28, 2023
Researcher: István Márton
WP Time Slots Booking Form <= 1.1.81 - Authenticated (Admin+) Stored Cross Site Scripting
3.8
CVE-2023-23971
Jan 20, 2023
Researcher: Rio Darmawan
WP Time Slots Booking Form <= 1.1.82 - Improper Authorization Checks
4.1
CVE-2023-23895
Jan 20, 2023
Researcher: yuyudhn
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting
5.5
CVE-2022-0389
Feb 2, 2022
Researcher: Rubina Shaikh
Title Status CVE ID CVSS Researchers Date
WP Time Slots Booking Form <= 1.2.50 - Authenticated (Subscriber+) SQL Injection Patched CVE-2026-48882 6.5 xwii June 2, 2026
WP Time Slots Booking Form <= 1.2.46 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-40791 7.2 Daniel Wade April 23, 2026
Time Slots Booking Form <= 1.2.42 - Missing Authorization Patched CVE-2026-32432 5.3 Nguyen Ba Khanh March 2, 2026
Time Slots Booking Form <= 1.2.39 - Missing Authorization Patched CVE-2025-68569 4.3 daroo December 20, 2025
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery Patched CVE-2025-49332 4.3 Jang Jeong Ahn (Jhanks) June 5, 2025
WP Time Slots Booking Form <= 1.2.11 - Missing Authorization Patched CVE-2024-35735 5.3 Manab Jyoti Dowarah June 6, 2024
WP Time Slots Booking Form <= 1.2.10 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-35734 7.2 Manab Jyoti Dowarah June 6, 2024
WP Time Slots Booking Form <= 1.2.06 - Unauthenticated Price Manipulation Patched CVE-2024-33543 5.3 Joshua Chan April 25, 2024
WP Time Slots Booking Form <= 1.1.76 - Cross-Site Request Forgery to Feedback Submission Patched CVE-2022-41790 4.3 István Márton February 28, 2023
WP Time Slots Booking Form <= 1.1.76 - Missing Authorization to Feedback Submission Patched CVE-2022-41790 4.3 István Márton February 28, 2023
WP Time Slots Booking Form <= 1.1.81 - Authenticated (Admin+) Stored Cross Site Scripting Patched CVE-2023-23971 3.8 Rio Darmawan January 20, 2023
WP Time Slots Booking Form <= 1.1.82 - Improper Authorization Checks Patched CVE-2023-23895 4.1 yuyudhn January 20, 2023
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting Patched CVE-2022-0389 5.5 Rubina Shaikh February 2, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation