WordPress plugin
Doctor Appointment Booking security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Doctor Appointment Booking vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤1.0.0No patch available | CVE-2025-27263 | |
| High8.8 | Authenticated (Subscriber+) Local File Inclusion ≤1.0.0No patch available | CVE-2025-27264 |
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤1.0.0No patch available
- High8.8Authenticated (Subscriber+) Local File Inclusion
≤1.0.0No patch available
Doctor Appointment Booking: common questions
Does Doctor Appointment Booking have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Doctor Appointment Booking: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Doctor Appointment Booking I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Doctor Appointment Booking vulnerability?
CVE-2025-27263, published Feb 21, 2025: Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) SQL Injection. Severity: Medium (CVSS 6.5).
Is any Doctor Appointment Booking vulnerability listed in CISA KEV?
No. None of the known Doctor Appointment Booking vulnerabilities is currently listed in the CISA KEV catalog.