CVE-2024-2844 — Easy Appointments <= 3.11.18 - Insufficient Authorization
The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in al…
Published: 2024-03-29 · CVSS: 4.3 · CVSS 3.1
The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18. This makes it possible for unauthenticated attackers to cancel other users orders.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7