CVE-2025-49332: codepeople WP Time Slots Booking Form, CSRF

Описание

Оригинално описание

Cross-Site Request Forgery (CSRF) vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Cross Site Request Forgery.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.30.

Засегнати продукти

• codepeople WP Time Slots Booking Form: до 1.2.30

Вид слабост

• CWE-352 CSRF

История

Други уязвимости в codepeople WP Time Slots Booking Form

• 8.5CVE-2026-48882
• 7.1CVE-2026-40791
• 5.3CVE-2026-32432
• 6.5CVE-2025-68569
• 4.7CVE-2023-23895

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-49332
• https://nvd.nist.gov/vuln/detail/CVE-2025-49332
• https://patchstack.com/database/Wordpress/Plugin/wp-time-slots-booking-form/vulnerability/wordpress-wp-time-slots-booking-form-1-2-30-cross-site-request-forgery-csrf-vulnerability?_s_id=cve