Appointmind

Appointmind has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Appointmind has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Appointmind is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Appointmind vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-9851

Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-09-16 00:00	Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Appointmind <= 4.1.0	`CVE-2025-9851`	6.4 Medium	Peter Thaleikis	Yes
2024-11-01 00:00	Appointmind <= 4.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting Appointmind <= 4.0.0	`CVE-2024-51679`	6.1 Medium	SOPROBRO	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv4.1.0

Appointmind

Author

gentlesource

5.0(2)

100/100

Last Updated

2026-08-19 (24d ago)

Active Installs

100+

Downloads

11,779

Requires WP

2.5+

Requires PHP

Tested up to

WP 7.1

Created

2012-06-22 (14y ago)

Include your Appointmind online appointment scheduling calender in any article or in the sidebar. This plugin requires that you have purchased either a monthly subscription or the downloadable version of the software. This plugin does not include the appointmind scheduling software. You can get the subscription or the software at Appointmind.com (English) or at Appointmind.de (Deutsch).

View on WordPress.org