Логотип exploitDog
bind:CVE-2025-5919
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-5919

Количество 2

Количество 2

nvd логотип

CVE-2025-5919

около 1 месяца назад

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-p5mw-m48c-rc39

около 1 месяца назад

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-5919

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад
github логотип
GHSA-p5mw-m48c-rc39

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.

CVSS3: 6.5
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу