WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simply-schedule-appointments
Published
2026-05-27
Title
Appointment Booking Calendar < 1.6.11.9 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Slug
simply-schedule-appointments
Published
2026-05-27
Title
Appointment Booking Calendar < 1.6.11.9 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint
Slug
simply-schedule-appointments
Published
2026-05-28
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.0 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-06-26
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.4 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-07-06
Title
Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information
Slug
simply-schedule-appointments
Published
2026-07-09
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.6 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-07-09
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.0 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-07-22
Title
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint
Slug
simply-schedule-appointments
Published
2026-07-23
Title
Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode
Slug
simply-schedule-appointments
Published
2026-07-28
Title
Simply Schedule Appointments < 1.6.12.11 - Unauthenticated SQL Injection
Slug
simply-schedule-appointments
Published
2026-07-28
Title
Simply Schedule Appointments < 1.6.12.11 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2026-08-13
Title
Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints
Slug
simply-schedule-appointments
Published
2026-08-15
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.12.11 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-09-02
Title
Simply Schedule Appointments < 1.6.12.24 - Cross-Site Request Forgery
Slug
simply-show-hooks
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
simply-static
Published
2024-03-25
Title
Simply Static < 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simply-static
Published
2024-04-22
Title
Simply Static < 3.1.4 - Unauthenticated Information Exposure
Slug
simplyconvert
Published
2025-12-11
Title
SimplyConvert <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'simplyconvert_hash' Option
Slug
simpul-events-by-esotech
Published
2024-11-08
Title
Simpul Events by Esotech <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2019-06-19
Title
Sina Extension For Elementor <= 2.2.0 - LFI
Slug
sina-extension-for-elementor
Published
2021-04-13
Title
Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS
Slug
sina-extension-for-elementor
Published
2024-03-25
Title
Sina Extension for Elementor < 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sina-extension-for-elementor
Published
2024-04-24
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sina Fancy Text Widget
Slug
sina-extension-for-elementor
Published
2024-05-03
Title
Sina Extension for Elementor < 3.5.2 - Authenticated (Contributor+) Local File Inclusion
Slug
sina-extension-for-elementor
Published
2024-05-13
Title
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) < 3.5.4 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting