WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simply-rets
Published
2025-04-01
Title
SimplyRETS Real Estate IDX <= 3.1.1 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2023-12-21
Title
Simply Schedule Appointments < 1.6.6.1 - Authenticated(Administrator+) SQL Injection
Slug
simply-schedule-appointments
Published
2024-03-05
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.6.24 - Cross-Site Request Forgery to Plugin Data Reset
Slug
simply-schedule-appointments
Published
2024-03-20
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.9 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
simply-schedule-appointments
Published
2024-03-20
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.9 - Authenticated (Subscriber+) SQL Injection
Slug
simply-schedule-appointments
Published
2024-03-26
Title
Simply Schedule Appointments < 1.6.6.24 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2024-05-15
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2024-08-23
Title
Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE
Slug
simply-schedule-appointments
Published
2024-10-15
Title
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
Slug
simply-schedule-appointments
Published
2024-10-15
Title
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
Slug
simply-schedule-appointments
Published
2025-03-06
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.8.5 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2025-03-12
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.8.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
simply-schedule-appointments
Published
2025-06-13
Title
Simply Schedule Appointments < 1.6.8.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
simply-schedule-appointments
Published
2025-12-18
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.9.17 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-01-05
Title
Appointment Booking Calendar < 1.6.9.6 - Unauthenticated Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-01-14
Title
Simply Schedule Appointments < 1.6.9.13 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Slug
simply-schedule-appointments
Published
2026-01-20
Title
Simply Schedule Appointments < 1.6.9.17 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-03-10
Title
Appointment Booking Calendar < 1.6.9.29 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Slug
simply-schedule-appointments
Published
2026-03-12
Title
Appointment Booking Calendar < 1.6.10.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint
Slug
simply-schedule-appointments
Published
2026-03-12
Title
Appointment Booking Calendar < 1.6.10.0 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-03-18
Title
Appointment Booking Calendar < 1.6.10.2 - Unauthenticated SQL Injection via 'fields' Parameter
Slug
simply-schedule-appointments
Published
2026-04-08
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.9.29 - Unauthenticated SQL Injection
Slug
simply-schedule-appointments
Published
2026-03-26
Title
Simply Schedule Appointments < 1.6.9.29 - Authenticated (Contributor+) SQL Injection