https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-30748.htmlhttps://patchthecve.com/cve/CVE-2023-30748.htmlWed, 17 Jun 2026 05:55:33 +0000MEDIUM 4.3: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikola Loncar Easy Appointments allows Stored XSS.This issue affects Easy Appointments: from n/a through 3.10.7.https://patchthecve.com/cve/CVE-2024-2844.htmlhttps://patchthecve.com/cve/CVE-2024-2844.htmlWed, 17 Jun 2026 07:25:40 +0000MEDIUM 4.3: The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18. This makes it possible for unauthenticated attackers to cancel other users ordershttps://patchthecve.com/cve/CVE-2024-2842.htmlhttps://patchthecve.com/cve/CVE-2024-2842.htmlWed, 17 Jun 2026 07:25:39 +0000MEDIUM 6.4: The Easy Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ea_full_calendar' shortcode in all versions up to, and including, 3.11.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authe