VulnSea

simply-schedule-appointments vulnerabilities

CVEs whose affected-version data names the simply-schedule-appointments package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-110382High· 7.1
1w ago

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: f…

▾ TwilightNSquared · simply-schedule-appointmentsEPSS 0.18%via CVEORG
CVE-2026-110381Medium· 6.3
2w ago

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedu…

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedu…

▾ SunlitNSquared · simply-schedule-appointmentsEPSS 0.20%via NVD
CVE-2026-94074Medium· 6.5
1mo ago

Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

▾ SunlitNSquared · simply-schedule-appointmentsEPSS 0.20%via NVD
CVE-2026-94673Medium· 5.3
1mo ago

Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.

Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.

▾ SunlitNSquared · simply-schedule-appointmentsEPSS 0.24%via NVD
CVE-2026-59523Medium· 6.5
3mo ago

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a t…

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a t…

▾ SunlitNSquared · simply-schedule-appointmentsEPSS 0.27%via NVD
simply-schedule-appointments vulnerabilities (CVEs) · VulnSea