Simply Schedule Appointments

WordPress plugin · simply-schedule-appointments · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Simply Schedule Appointments on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint CVE.org	>=0, <1.6.12.6	v1.6.12.6	CVE-2026-16540	Aug 2, 2026
MEDIUM CVSS 6.5	Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints CVE.org	>=0, <1.6.12.17	v1.6.12.17	CVE-2026-16541	Aug 15, 2026
MEDIUM CVSS 6.5	Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode CVE.org	>=0, <1.6.12.11	v1.6.12.11	CVE-2026-15254	Aug 3, 2026
MEDIUM CVSS 6.1	Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information CVE.org	>=0, <1.6.12.4	v1.6.12.4	CVE-2026-13400	Jul 27, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.