WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simply-rets
Published
2025-01-08
Title
SimplyRETS Real Estate IDX < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-rets
Published
2025-03-27
Title
SimplyRETS Real Estate IDX < 3.1.0 - Cross-Site Request Forgery
Slug
simply-rets
Published
2025-04-01
Title
SimplyRETS Real Estate IDX < 3.2.3 - Reflected Cross-Site Scripting
Slug
simply-rets
Published
2026-08-19
Title
SimplyRETS Real Estate IDX < 3.2.9 - Unauthenticated Stored Cross-Site Scripting
Slug
simply-rets
Published
2026-10-12
Title
SimplyRETS Real Estate IDX < 3.3.0 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure
Slug
simply-schedule-appointments
Published
2022-08-08
Title
Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2023-12-21
Title
Simply Schedule Appointments < 1.6.6.1 - Authenticated(Administrator+) SQL Injection
Slug
simply-schedule-appointments
Published
2024-03-05
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.6.24 - Cross-Site Request Forgery to Plugin Data Reset
Slug
simply-schedule-appointments
Published
2024-03-20
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.9 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
simply-schedule-appointments
Published
2024-03-20
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.9 - Authenticated (Subscriber+) SQL Injection
Slug
simply-schedule-appointments
Published
2024-03-26
Title
Simply Schedule Appointments < 1.6.6.24 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2024-05-15
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.7.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2024-08-23
Title
Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE
Slug
simply-schedule-appointments
Published
2024-10-15
Title
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
Slug
simply-schedule-appointments
Published
2024-10-15
Title
Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS
Slug
simply-schedule-appointments
Published
2025-03-06
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.8.5 - Reflected Cross-Site Scripting
Slug
simply-schedule-appointments
Published
2025-03-12
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.8.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
simply-schedule-appointments
Published
2025-06-13
Title
Simply Schedule Appointments < 1.6.8.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
simply-schedule-appointments
Published
2025-12-18
Title
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.9.17 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-01-05
Title
Appointment Booking Calendar < 1.6.9.6 - Unauthenticated Sensitive Information Exposure
Slug
simply-schedule-appointments
Published
2026-01-14
Title
Simply Schedule Appointments < 1.6.9.13 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Slug
simply-schedule-appointments
Published
2026-01-20
Title
Simply Schedule Appointments < 1.6.9.17 - Missing Authorization
Slug
simply-schedule-appointments
Published
2026-03-10
Title
Appointment Booking Calendar < 1.6.9.29 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Slug
simply-schedule-appointments
Published
2026-03-12
Title
Appointment Booking Calendar < 1.6.10.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint