Skip to content
PluginCanary

Easy Appointments

by Easy Appointments · 10,000+ active installs · Checked 4 Nov 2026
Watch

Watch: held back by a low Support score (25 of 100).

75/ 100Watch
Canary Score

Based on 4 of 5 areas

Sub-scores for Easy Appointments
Ownership100
Maintenance100
Security60
Support25
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-317 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 23 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Easy Appointments still maintained?
Yes. Last release 21 Oct 2026, 37 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns Easy Appointments, and has it changed hands?
No change recorded. Main committer loncar since May 2015. 4 Nov 2026 · SVN log
Was Easy Appointments removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Easy Appointments safe?
23 known vulnerabilities, all fixed (latest in 3.12.28). Not on the exploited list. 18 Sep 2026 · Wordfence Intelligence
Is the latest Easy Appointments update safe to install?
No ownership change before 4.0.4. No one-star spike after it. 21 Oct 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
loncar29 May 2015 to 26 Jan 2025, 480 commits
easyappointments28 Jan 2025 to 21 Oct 2026, 90 commits

2 committers recorded. No ownership changes recorded since 2015.

Maintenance

Last release
14 days ago
Releases, 24 months
37
Tested up to
7.1 current
Requires PHP
5.3 supported 8.2+
Releases per quarter
Releases per quarter for Easy Appointments
Q1 20240
Q2 20242
Q3 20244
Q4 20245
Q1 20254
Q2 20255
Q3 20254
Q4 20252
Q1 20265
Q2 20266
Q3 20268
Q4 20262

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
25%
Threads, last 2 months
16

Trend appears after 8 weekly snapshots.

Security record

17 vulnerabilities in 24 months (23 on record), all patched (latest fixed in 3.12.28).

Show 23 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
18 Sep 2026Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action6.5<= 3.12.273.12.28Before disclosure
16 Sep 2026Unauthenticated Insecure Direct Object Reference5.34.0 to 4.0.2.14.0.2.2Before disclosure
16 Sep 2026Missing Authorization5.3<= 4.0.2.14.0.2.2Before disclosure
7 Sep 2026Unauthenticated Stored Cross-Site Scripting7.2<= 4.0.2.1Not affectedn/a
21 Aug 2026Authenticated (Contributor+) Information Exposure4.3< 4.0.14.0.1Before disclosure
30 Jul 2026Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 3.12.283.12.28Before disclosure
30 Jul 2026Authenticated (Contributor+) Insecure Direct Object Reference4.3< 3.12.283.12.28Before disclosure
30 Jul 2026Missing Authorization4.3< 4.0.14.0.115
30 Jul 2026Authenticated (Subscriber+) Information Exposure4.3< 3.12.283.12.28Before disclosure
30 Jul 2026Missing Authorization4.3< 3.12.283.12.28Before disclosure
29 Jul 2026Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 3.12.283.12.28Before disclosure
23 Jul 2026Missing Authorization to Authenticated (Contributor+) Arbitrary Connection Deletion8.1<= 3.12.273.12.28Before disclosure
16 Jul 2026Unauthenticated Insecure Direct Object Reference5.3<= 3.12.273.12.28Before disclosure
9 Jul 2026Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation4.3<= 3.12.273.12.28Before disclosure
17 Apr 2026Unauthenticated Sensitive Information Exposure via REST API7.5<= 3.12.213.12.22Before disclosure
13 Apr 2026Missing Authorization5.3<= 3.12.213.12.22Before disclosure
9 Sep 2025Unauthenticated Arbitrary Shortcode Execution6.5<= 3.12.143.12.14.1Before disclosure
28 Mar 2024Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.11.183.11.1974
28 Mar 2024Insufficient Authorization4.3<= 3.11.183.11.1974
5 May 2023Cross-Site Request Forgery via multiple AJAX actions6.3<= 3.11.93.11.10n/a
14 Apr 2023Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.11.03.11.1n/a
27 Dec 2022Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.10.73.11.0n/a
16 Oct 2017Cross-Site Scripting6.1< 1.12.01.12.01217

Changelog mentions of security fixes: 3.12.28 (security, authorization); 4.0.1 (security, authorization); 4.0.2.1 (security); 4.0.2.2 (security, XSS); 4.0.4 (security, authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Last 90 days vs lifetime average rating for Easy Appointments
Last 90 daysNo reviews
Lifetime4.3
Average rating per quarter
Average rating per quarter for Easy Appointments
Q3 20242.0
Q1 20254.0
Q4 20251.0
Q2 20265.0

Average rating rose from 2.0 to 5.0 between Q3 2024 and Q2 2026.

Rating distribution
5 star99
4 star8
3 star4
2 star8
1 star12
Latest low reviews

Momentum

Active installs
10,000+
Downloads, last full week
2,595
Weekly downloads, last 26 complete weeks
Weekly downloads for Easy Appointments
4 May 2026287
11 May 20267,823
18 May 20261,937
25 May 20261,188
1 Jun 2026965
8 Jun 20266,895
15 Jun 20261,827
22 Jun 20261,206
29 Jun 2026537
6 Jul 20268,305
13 Jul 20261,481
20 Jul 20261,445
27 Jul 20261,083
3 Aug 2026970
10 Aug 202613,976
17 Aug 20262,937
24 Aug 20261,539
31 Aug 202613,336
7 Sep 20261,564
14 Sep 20268,659
21 Sep 20262,041
28 Sep 20261,424
5 Oct 20268,150
12 Oct 20261,460
19 Oct 20267,829
26 Oct 20262,595

Weekly downloads over the last 4 weeks are 28% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

SimplyBook.meScore 95 · 30,000+MotoPress Hotel Booking StylesScore 95 · 10,000+MotoPress Hotel Booking for ElementorScore 95 · 10,000+

Facts

Version
4.0.4
Author
Easy Appointments
Added
29 May 2015
Last updated
21 Oct 2026
Active installs
10,000+
Requires WordPress
5.0
Tested up to
7.1.4
Requires PHP
5.3
Category
Bookings & Scheduling > Appointment Scheduling
Tags
booking, calendar, appointment, reservation, appointments

Questions about Easy Appointments

Is Easy Appointments still maintained?

Yes. Last release 21 Oct 2026, 37 releases in the last 24 months.

Who owns Easy Appointments, and has it changed hands?

No change recorded. Main committer loncar since May 2015.

Was Easy Appointments removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Easy Appointments safe?

23 known vulnerabilities, all fixed (latest in 3.12.28). Not on the exploited list.

Is the latest Easy Appointments update safe to install?

No ownership change before 4.0.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue