Vulnerabilities / Simply Schedule Appointments
Simply Schedule Appointments vulnerabilities
Advisories WPSec published for Simply Schedule Appointments. Other sources may list more. Its attack surface: Simply Schedule Appointments on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-1016 | Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Incorrect Authorization to Group Appointment Cancellation and Deletion | Medium 6.5 | 1.6.12.37 |
| 2026-10-15 | WPSEC-2026-1015 | Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Sensitive Information Exposure via Appointment Types REST Endpoint | Medium 5.3 | 1.6.12.37 |
| 2026-10-15 | WPSEC-2026-1014 | Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via Debug Log | High 7.2 | 1.6.12.37 |
| 2026-10-15 | WPSEC-2026-1013 | Simply Schedule Appointments <= 1.6.12.35 - Authenticated (Contributor+) Insecure Direct Object Reference via 'edit' Shortcode Attribute | Medium 6.3 | 1.6.12.37 |
License: CC BY 4.0