WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simply-schedule-appointments
Published
2026-03-12
Title
Appointment Booking Calendar < 1.6.10.0 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-03-18
Title
Appointment Booking Calendar < 1.6.10.2 - Unauthenticated SQL Injection via 'fields' Parameter
Slug
simply-schedule-appointments
Published
2026-04-08
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.9.29 - Unauthenticated SQL Injection
Slug
simply-schedule-appointments
Published
2026-03-26
Title
Simply Schedule Appointments < 1.6.9.29 - Authenticated (Contributor+) SQL Injection
Slug
simply-schedule-appointments
Published
2026-02-26
Title
Simply Schedule Appointments < 1.6.11.1 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-04-27
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-05-06
Title
Appointment Booking Calendar < 1.6.11 - Unauthenticated Arbitrary Appointment View, Modification and Deletion
Slug
simply-schedule-appointments
Published
2026-05-26
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.7 - Unauthenticated Denial of Service
Slug
simply-schedule-appointments
Published
2026-05-27
Title
Appointment Booking Calendar < 1.6.11.9 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Slug
simply-schedule-appointments
Published
2026-05-27
Title
Appointment Booking Calendar < 1.6.11.9 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint
Slug
simply-schedule-appointments
Published
2026-05-28
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.0 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-06-26
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.4 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-07-06
Title
Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information
Slug
simply-schedule-appointments
Published
2026-07-09
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.6 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-07-09
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.0 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-07-22
Title
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint
Slug
simply-schedule-appointments
Published
2026-07-23
Title
Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode
Slug
simply-schedule-appointments
Published
2026-07-28
Title
Simply Schedule Appointments < 1.6.12.11 - Unauthenticated SQL Injection
Slug
simply-schedule-appointments
Published
2026-07-28
Title
Simply Schedule Appointments < 1.6.12.11 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-08-13
Title
Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints
Slug
simply-schedule-appointments
Published
2026-08-15
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.11 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-09-02
Title
Simply Schedule Appointments < 1.6.12.24 - Cross-Site Request Forgery
Slug
simply-schedule-appointments
Published
2026-09-24
Title
Simply Schedule Appointments < 1.6.12.33 - Unauthenticated Insecure Direct Object Reference
Slug
simply-schedule-appointments
Published
2026-09-24
Title
Simply Schedule Appointments < 1.6.12.31 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-09-29
Title
Simply Schedule Appointments < 1.6.12.33 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter