CVE-2016-10916

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Appointment Booking Calendar (Codepeople)

References

• https://wordpress.org/plugins/appointment-booking-calendar/#developers