Composer alextselegidis/easyappointments has 20 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-0482 | Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments | critical | 9.1 | <1.4.3 | 1.4.3 |
| CVE-2022-1397 | Privilege escalation in easyappointments | high | 8.8 | <=1.4.3 | – |
| CVE-2024-57602 | Easy!Appointments Improper Restriction of Excessive Authentication Attempts | critical | 9.8 | <=1.5.0 | – |
| CVE-2023-1269 | Easy!Appointments uses hard-coded credentials | critical | 9.8 | <=1.4.3 | – |
| CVE-2023-2105 | alextselegidis/easyappointments Session Fixation vulnerability | medium | 5.4 | <=1.4.3 | – |
| CVE-2025-29448 | Easy!Appointments Denial of Service (DoS) | medium | 0.0 | <=1.5.1 | – |
| CVE-2024-57601 | Remote code execution in alextselegidis/easyappointments | medium | 6.1 | <=1.5.0 | – |
| CVE-2023-2102 | alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting | medium | 6.8 | <=1.4.3 | – |
| CVE-2023-2103 | alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting | medium | 5.4 | <=1.4.3 | – |
| CVE-2026-52837 | Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page | medium | 0.0 | <=1.5.2 | – |
| CVE-2023-2104 | alextselegidis/easyappointments Improper Access Control vulnerability | medium | 5.4 | <=1.4.3 | – |
| CVE-2023-3700 | Easy!Appointments Improper Access Control vulnerability | medium | 6.3 | <1.5.0 | 1.5.0 |
| CVE-2023-1367 | Code Injection in alextselegidis/easyappointments | high | 7.3 | <1.5.0 | 1.5.0 |
| CVE-2025-50383 | Easy!Appointments SQL injection vulnerability | medium | 0.0 | <1.5.2-beta.1 | 1.5.2-beta.1 |
| CVE-2026-52840 | Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network | low | 2.7 | <=1.5.2 | – |
| CVE-2026-23622 | alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass | high | 0.0 | <=1.5.2 | – |
| CVE-2026-55651 | Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure | high | 7.1 | =1.5.2 | – |
| CVE-2026-52838 | Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS | low | 2.6 | <=1.5.2 | – |
| CVE-2026-52841 | Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync | low | 3.1 | <=1.5.2 | – |
| CVE-2026-52839 | Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass | low | 3.3 | <1.6.0 | 1.6.0 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked