CVE-2015-7319: SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows…

PriorityP343high7.5CVSS 2.0

AVNACLAuNCPIPAP

EPSS

2.43%

82.2th percentile

SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updating the username.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
codepeople	appointment_booking_calendar	< 1.1.24	1.1.24
codepeople	appointment_booking_calendar	<= 1.1.7	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.