Vulnerability reported | WordPress.org

Resolved wpmakenorg
(@wpmakenorg)

1 week, 5 days ago

WordPress Easy Appointments plugin <= 4.0 – Broken Access Control vulnerability

Status: Protection Not Active

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Support Akshay A
(@akshaycode1)

1 week, 2 days ago

Hi,

Could you please share some more details about the issue?

If possible, a short video demonstrating the issue would be very helpful. This will allow us to better understand the problem and investigate it further.

Thread Starter wpmakenorg
(@wpmakenorg)

1 week, 1 day ago

I received info via managewp – Does this link help? – https://patchstack.com/database/wordpress/plugin/easy-appointments/vulnerability/wordpress-easy-appointments-plugin-3-12-26-contributor-appointment-data-disclosure-modification-vulnerability

Plugin Support Akshay A
(@akshaycode1)

1 week ago

Hi,

We have already fixed this issue in our latest update, version 4.0.1. You can check in Changelog : https://wordpress.org/plugins/easy-appointments/#developers

Kindly update to the latest version, clear the cache, and give it another try. If you’re still facing any issues, please let us know, and we’ll be happy to assist.

Thread Starter wpmakenorg
(@wpmakenorg)

1 week ago

Also in 4.0.1 same message through ManageWP
Easy Appointments plugin <= 4.0.1 – Broken Access Control vulnerability – Protection Not Active

https://patchstack.com/database/wordpress/plugin/easy-appointments/vulnerability/wordpress-easy-appointments-plugin-3-12-26-contributor-appointment-data-disclosure-modification-vulnerability

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

6 replies
2 participants
Last reply from: wpmakenorg
Last activity: 1 week ago
Status: resolved