CVE-2016-10916: Codepeople Appointment Booking Calendar

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.

Affected products

• Codepeople Appointment Booking Calendar: before 1.1.24 (fixed in 1.1.24)

Published 2019-08-22. Last modified 2026-06-17.