CVE-2015-10099

A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This affects the function dex_process_ready_to_go_appointment of the file dex_appointments.php. The manipulation of the argument itemnumber leads to sql injection. It is possible to initiate the attack remotely. The patch is named e29a9cdbcb0f37d887dd302a05b9e8bf213da01d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-225351.

• CWE-89

• https://github.com/wp-plugins/cp-appointment-calendar/commit/e29a9cdbcb0f37d887dd302a05b9e8bf213da01dPatch
• https://vuldb.com/?ctiid.225351Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225351Permissions Required, Third Party Advisory
• https://github.com/wp-plugins/cp-appointment-calendar/commit/e29a9cdbcb0f37d887dd302a05b9e8bf213da01dPatch
• https://vuldb.com/?ctiid.225351Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225351Permissions Required, Third Party Advisory

Published

Apr 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10093A vulnerability was found in Mark User as Spammer Plugin 1.0…5.4
• CVE-2015-10094A vulnerability was found in Fastly Plugin up to 0.97 on Wor…6.1
• CVE-2015-10095A vulnerability classified as problematic has been found in …6.1
• CVE-2015-10096A vulnerability, which was classified as critical, was found…8.1
• CVE-2015-10097A vulnerability was found in grinnellplans-php up to 3.0. It…9.8
• CVE-2015-10098A vulnerability was found in Broken Link Checker Plugin up t…6.1
• CVE-2015-1010Rockwell Automation RSView32 7.60.00 (aka CPR9 SR4) and earl…
• CVE-2015-10100A vulnerability, which was classified as critical, has been …9.8
• CVE-2015-10101A vulnerability classified as problematic was found in Googl…6.1
• CVE-2015-10102A vulnerability, which was classified as critical, has been …6.1
• CVE-2015-10103A vulnerability, which was classified as problematic, was fo…5.5
• CVE-2015-10104A vulnerability, which was classified as problematic, has be…6.1