Skip to contentNsquared Simply Schedule Appointments vulnerabilities
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.13.0 - Broken Access Control vulnerabilityCVE-2026-1254375.3 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1103827.1 High
- croixhaug simply schedule appointmentsSimply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}CVE-2026-1040007.2 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1103816.3 Medium
- croixhaug simply schedule appointmentsAppointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public TokenCVE-2026-67235.3 Medium
- croixhaug simply schedule appointmentsSimply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' ParameterCVE-2026-911096.5 Medium
- croixhaug simply schedule appointmentsSimply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_type…CVE-2026-922457.5 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-946735.3 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerabilityCVE-2026-94074Public exploit6.5 Medium
- croixhaug simply schedule appointmentsSimply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' ParameterCVE-2026-892947.5 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-847648.8 High
- croixhaug simply schedule appointmentsAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information ExposureCVE-2026-133586.5 Medium
- nsquared simply schedule appointmentsSimply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST EndpointsCVE-2026-165416.5 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-655137.1 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerabilityCVE-2026-655089.3 Critical
- nsquared simply schedule appointmentsSimply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin ShortcodeCVE-2026-152546.5 Medium
- nsquared simply schedule appointmentsSimply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge EndpointCVE-2026-16540Public exploit7.5 High
- nsquared simply schedule appointmentsSimply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer InformationCVE-2026-134006.1 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerabilityCVE-2026-595236.5 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerabilityCVE-2026-578126.5 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-573177.1 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerabilityCVE-2026-423847.5 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerabilityCVE-2026-394939.3 Critical
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-394477.1 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerabilityCVE-2026-396945.3 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerabilityCVE-2026-394958.5 High
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerabilityCVE-2025-693156.5 Medium
- n squared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-223117.1 High