Cross-Site Request Forgery Vulnerability in Easy Booked - Appointment Booking System by MD Abu Jubayer Hossain
CVE-2025-22634

5.4MEDIUM

What is CVE-2025-22634?

The Easy Booked – Appointment Booking and Scheduling Management System for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability. This issue allows an attacker to perform unauthorized actions on behalf of a user who is logged into the website. If exploited, this vulnerability can compromise the integrity of the application, leading to unauthorized access and manipulation of appointment data. Users of affected versions should implement immediate security measures, including updates or patches, to safeguard their systems.

Affected Version(s)

Easy Booked – Appointment Booking and Scheduling Management System for WordPress <= 2.4.5

References

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

l8BL (Patchstack Alliance)
.