SS
Product
Simply Schedule Appointments
7
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add Simply Schedule Appointments to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7129 | 7.2 | Sep 13 | Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE Affected: before 1.6.7.43 |
| CVE-2023-50851 | 7.2 | Dec 28 | WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection Affected: before 1.6.6.1 |
| CVE-2022-2373 | 5.3 | Aug 29 | The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details… Affected: before 1.5.7.7 |
| CVE-2024-7877 | 4.8 | Nov 5 | Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS Affected: before 1.6.7.55 |
| CVE-2024-7876 | 4.8 | Nov 5 | Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS Affected: before 1.6.7.55 |
| CVE-2022-2374 | 4.8 | Aug 29 | The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… Affected: before 1.5.7.7 |
| CVE-2024-1760 | 4.7 | Mar 6 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset Affected: through 1.6.6.20 |
Showing 7