Appointment

Appointment has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 2 are fixed as of August 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Appointment has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Appointment is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Appointment vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Multiple Themes (Various Versions) - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2026-02-11 00:00	Appointment <= 3.7.3 - Cross-Site Request Forgery Appointment <= 3.7.3	`CVE-2026-39620`	4.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2022-02-14 00:00	Multiple Themes (Various Versions) - Reflected Cross-Site Scripting Appointment < 3.2.6	`N/A`	6.1 Medium	WPScanTeam	Yes

Showing 1–2 of 2 reports

Latestv3.7.5

Appointment

Author

webriti

4.8(164)

96/100

Last Updated

2026-07-15 (1mo ago)

Active Installs

2,000+

Downloads

1,190,944

Requires WP

4.5+

Requires PHP

5.4+

Created

2013-08-11 (13y ago)

Appointment WordPress Theme is a fully responsive and translation-ready theme that allows you to create stunning blogs and websites. The theme is well suited for companies, law firms, travel, photography, recipes, design, art, personal and any other creative websites and blogs. The theme is developed using Bootstrap 3 that makes it mobile and tablet friendly. It has various options in the WordPress Customizer to change the look of the theme. The theme customizer can be used to add your own custom header, favicon, logo, slides, services, callout and much more. In the premium version you can add different type of slides like video, aside, quote, status and standard, all of which have a different HTML look. There are a number of in-built widgets; sidebars with support for WPML, the Polylang translation WordPress plugin and Contact Form 7; a portfolio template, contact us, portfolio column layouts and many sections for business using the Homepage template. Appointment theme comes with various locales and this theme is General Data Protection Regulation ready as it comes with WP GDPR Compliant Just navigate to Appearance / Customize to start customizing.