CVE-2024-12274

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Jan 13, 2025 (Jan 13, 2025)

Modified

Jun 17, 2026

Description

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).

Vendors: codepeople
Products: appointment booking calendar
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.