CVE-2025-31601

WordPress Appointy Appointment Scheduler plugin <= 4.2.1 - CSRF to Settings Change vulnerability

Description

Cross-Site Request Forgery (CSRF) vulnerability in appointy Appointy Appointment Scheduler appointy-appointment-scheduler allows Cross Site Request Forgery.This issue affects Appointy Appointment Scheduler: from n/a through <= 4.2.1.

INFO

Published Date :

2025-03-31T12:55:34.198Z

Last Modified :

2026-04-01T15:49:13.746Z

Source :

Patchstack

AFFECTED PRODUCTS

The following products are affected by CVE-2025-31601 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-31601.

URL	Resource
https://patchstack.com/database/Wordpress/Plugin/appointy-appointment-scheduler/vulnerability/wordpress-appointy-appointment-scheduler-plugin-4-2-1-csrf-to-settings-change-vulnerability?_s_id=cve