Appointy Appointment Scheduler Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Appointy Appointment Scheduler WordPress plugin, affecting versions through 4.2.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

Impact

Exploitation could enable attackers to manipulate settings or perform actions on behalf of users with higher privileges.

Remediation

Users are advised to remove and replace the Appointy Appointment Scheduler plugin, as it is likely abandoned and will not receive further updates or fixes.