SS
Product
Simply Schedule Appointments
20
CVEs
0
On KEV
9.3
Max CVSS
4
New 30D
Severity mix
Critical 2High 8Medium 10Low 0
Watch
Add Simply Schedule Appointments to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84764 | 8.8 | Sep 2 | WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.6.12.23 |
| CVE-2024-2342 | 8.8 | Apr 9 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode Affected: before 1.6.7.9 |
| CVE-2026-39495 | 8.5 | Apr 8 | WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability Affected: through 1.6.9.27 |
| CVE-2026-42384 | 7.5 | Jun 15 | WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability Affected: before 1.6.11.2 |
| CVE-2026-110382 | 7.1 | Oct 18 | WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.12.35 |
| CVE-2026-65513 | 7.1 | Aug 6 | WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.12.10 |
| CVE-2026-57317 | 7.1 | Jun 26 | WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.12.2 |
| CVE-2026-39447 | 7.1 | Jun 15 | WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.10.6 |
Showing 8