Login Request a demo
SS
Product
Simply Schedule Appointments
by NSquared · last CVE Oct 18, 2026
20
CVEs
0
On KEV
9.3
Max CVSS
4
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 2High 8Medium 10Low 0
Severity
All severities20Critical2High8Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Simply Schedule Appointments to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-65508
9.3
0%
Aug 6
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability
Affected: through 1.6.12.10
CVE-2026-39493
9.3
0%
Jun 15
WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
Affected: through 1.6.9.27
CVE-2026-84764
8.8
0%
Sep 2
WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.6.12.23
CVE-2024-2342
8.8
1%
Apr 9
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Affected: before 1.6.7.9
CVE-2026-39495
8.5
0%
Apr 8
WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
Affected: through 1.6.9.27
CVE-2026-42384
7.5
0%
Jun 15
WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability
Affected: before 1.6.11.2
CVE-2026-110382
7.1
0%
Oct 18
WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.6.12.35
CVE-2026-65513
7.1
0%
Aug 6
WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.6.12.10
CVE-2026-57317
7.1
0%
Jun 26
WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.6.12.2
CVE-2026-39447
7.1
0%
Jun 15
WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.6.10.6
CVE-2026-94074
6.5
0%
Sep 30
WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Affected: through 1.6.12.29
CVE-2026-59523
6.5
0%
Jul 13
WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability
Affected: through 1.6.11.11
CVE-2026-57812
6.5
0%
Jul 13
WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability
Affected: through 1.6.12.4
CVE-2025-69315
6.5
0%
Jan 22
WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability
Affected: through 1.6.9.15
CVE-2024-2341
6.5
1%
Apr 9
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection
Affected: before 1.6.7.9
CVE-2026-110381
6.3
0%
Oct 15
WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 1.6.12.35
CVE-2024-4288
5.4
0%
May 16
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.6.7.18
CVE-2026-94673
5.3
0%
Sep 30
WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 1.6.12.31
CVE-2026-39694
5.3
0%
Apr 8
WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability
Affected: through 1.6.10.2
CVE-2024-1760
4.7
0%
Mar 6
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset
Affected: before 1.6.6.24
Showing 20