Simply Schedule Appointments vulnerabilities | LiveThreat CVE Feed

Product

Simply Schedule Appointments

by NSquared · last CVE Oct 18, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities20 In the news0 Timeline

Severity mix

Critical 2High 8Medium 10Low 0

Severity

All severities20 Critical2 High8 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simply Schedule Appointments to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-94074	6.5	0%	Sep 30	WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability Affected: through 1.6.12.29
CVE-2026-59523	6.5	0%	Jul 13	WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability Affected: through 1.6.11.11
CVE-2026-57812	6.5	0%	Jul 13	WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability Affected: through 1.6.12.4
CVE-2025-69315	6.5	0%	Jan 22	WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability Affected: through 1.6.9.15
CVE-2024-2341	6.5	1%	Apr 9	Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection Affected: before 1.6.7.9
CVE-2026-110381	6.3	0%	Oct 15	WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability Affected: through 1.6.12.35
CVE-2024-4288	5.4	0%	May 16	Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 1.6.7.18
CVE-2026-94673	5.3	0%	Sep 30	WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability Affected: through 1.6.12.31
CVE-2026-39694	5.3	0%	Apr 8	WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability Affected: through 1.6.10.2
CVE-2024-1760	4.7	0%	Mar 6	Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset Affected: before 1.6.6.24