Skip to content
Nsquared vulnerabilities
Newest
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110382
7.1 High
-
croixhaug simply schedule appointments
Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}
CVE-2026-104000
7.2 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-110381
6.3 Medium
-
croixhaug simply schedule appointments
Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token
CVE-2026-6723
5.3 Medium
-
croixhaug simply schedule appointments
Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter
CVE-2026-91109
6.5 Medium
-
croixhaug simply schedule appointments
Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_type…
CVE-2026-92245
7.5 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-94673
5.3 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
CVE-2026-94074
Public exploit
6.5 Medium
-
croixhaug simply schedule appointments
Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter
CVE-2026-89294
7.5 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-84764
8.8 High
-
croixhaug simply schedule appointments
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
CVE-2026-13358
6.5 Medium
-
nsquared simply schedule appointments
Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints
CVE-2026-16541
6.5 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65513
7.1 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability
CVE-2026-65508
9.3 Critical
-
nsquared simply schedule appointments
Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode
CVE-2026-15254
6.5 Medium
-
nsquared simply schedule appointments
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint
CVE-2026-16540
Public exploit
7.5 High
-
nsquared simply schedule appointments
Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information
CVE-2026-13400
6.1 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability
CVE-2026-59523
6.5 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability
CVE-2026-57812
6.5 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57317
7.1 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability
CVE-2026-42384
7.5 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
CVE-2026-39493
9.3 Critical
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39447
7.1 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability
CVE-2026-39694
5.3 Medium
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
CVE-2026-39495
8.5 High
-
nsquared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability
CVE-2025-69315
6.5 Medium
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsquared appointment booking calendar +1 more
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting
CVE-2024-13431
6.1 Medium
-
nsquared draw attention
WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2023-46616
5.4 Medium
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 more
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
CVE-2024-7877
4.8 Medium
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 more
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
CVE-2024-7876
4.8 Medium
-
nsquared appointment booking calendar, croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +2 more
Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE
CVE-2024-7129
7.2 High
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, n squared appointment booking calendar, nsquared simply schedule appointments +2 more
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4288
6.4 Medium
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsquared simply schedule appointments +1 more
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
CVE-2024-2341
8.8 High
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsquared simply schedule appointments +1 more
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2024-2342
8.8 High
-
n squared simply schedule appointments
WordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-22311
7.1 High
-
croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +1 more
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset
CVE-2024-1760
4.3 Medium