Cross-Site Request Forgery Vulnerability in Easy Booked - Appointment Booking System by MD Abu Jubayer Hossain
CVE-2025-22634
5.4MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 27 March 2025
What is CVE-2025-22634?
The Easy Booked – Appointment Booking and Scheduling Management System for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue allows an attacker to perform unauthorized actions on behalf of a user who is logged into the website. If exploited, this vulnerability can compromise the integrity of the application, leading to unauthorized access and manipulation of appointment data. Users of affected versions should implement immediate security measures, including updates or patches, to safeguard their systems.
Affected Version(s)
Easy Booked – Appointment Booking and Scheduling Management System for WordPress <= 2.4.5