NS
Vendor
NSquared
25
CVEs
0
On KEV
4
New 30D
Products
SS9.3
Simply Schedule Appointments
NSquared
20 CVEs0 on KEV4 new
AB7.2
Appointment Booking Calendar
Nsquared
4 CVEs0 on KEV0 new
DA5.4
Draw Attention
NSquared
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110382 | SS Simply Schedule Appointments NSquared | 7.1 | Oct 18 | WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110381 | SS Simply Schedule Appointments NSquared | 6.3 | Oct 15 | WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-94673 | SS Simply Schedule Appointments NSquared | 5.3 | Sep 30 | WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-94074 | SS Simply Schedule Appointments NSquared | 6.5 | Sep 30 | WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability |
| CVE-2026-84764 | SS Simply Schedule Appointments NSquared | 8.8 | Sep 2 | WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-65513 | SS Simply Schedule Appointments NSquared | 7.1 | Aug 6 | WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65508 | SS Simply Schedule Appointments NSquared | 9.3 | Aug 6 | WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability |
| CVE-2026-59523 | SS Simply Schedule Appointments NSquared | 6.5 | Jul 13 | WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability |
| CVE-2026-57812 | SS Simply Schedule Appointments NSquared | 6.5 | Jul 13 | WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability |
| CVE-2026-57317 | SS Simply Schedule Appointments NSquared | 7.1 | Jun 26 | WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42384 | SS Simply Schedule Appointments NSquared | 7.5 | Jun 15 | WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability |
| CVE-2026-39493 | SS Simply Schedule Appointments NSquared | 9.3 | Jun 15 | WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability |
| CVE-2026-39447 | SS Simply Schedule Appointments NSquared | 7.1 | Jun 15 | WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39694 | SS Simply Schedule Appointments NSquared | 5.3 | Apr 8 | WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability |
| CVE-2026-39495 | SS Simply Schedule Appointments NSquared | 8.5 | Apr 8 | WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability |
| CVE-2025-69315 | SS Simply Schedule Appointments NSquared | 6.5 | Jan 22 | WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability |
| CVE-2024-13431 | AB Appointment Booking Calendar Nsquared | 6.1 | Mar 7 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting |
| CVE-2023-46616 | DA Draw Attention NSquared | 5.4 | Jan 2 | WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability |
| CVE-2024-7877 | AB Appointment Booking Calendar Nsquared | 4.8 | Nov 5 | Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS |
| CVE-2024-7876 | AB Appointment Booking Calendar Nsquared | 4.8 | Nov 5 | Appointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSS |
| CVE-2024-7129 | AB Appointment Booking Calendar Nsquared | 7.2 | Sep 13 | Appointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCE |
| CVE-2024-4288 | SS Simply Schedule Appointments Nsquared | 5.4 | May 16 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2341 | SS Simply Schedule Appointments Nsquared | 6.5 | Apr 9 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection |
| CVE-2024-2342 | SS Simply Schedule Appointments Nsquared | 8.8 | Apr 9 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode |
| CVE-2024-1760 | SS Simply Schedule Appointments Nsquared | 4.7 | Mar 6 | Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset |