CVE-2024-32720CWE-307

WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

Medium · published May 17, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.6th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2024-05-17T09:37Z
EPSS history
Timeline
  • 17 MAY 09:37Z
    WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
    cvelistv5