Approved changes feed: RSS · Atom

cpe:2.3:a:nsquared:simply_schedule_appointments:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNsquared (5df8d163-ec82-563d-8270-48c4f6133842)
ProductSimply Schedule Appointments (e49b536c-ec30-58b2-92b1-f373820f06cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-59523 vulnerable 2026-07-29 01:03:17.491509 WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.11.11.
Published: 2026-07-13T08:41:25.749Z
Updated: 2026-07-13T10:09:02.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57812 vulnerable 2026-07-29 01:03:16.315685 WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.12.4.
Published: 2026-07-13T08:41:25.598Z
Updated: 2026-07-13T13:58:26.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57317 vulnerable 2026-07-29 01:00:29.591389 WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.
Published: 2026-06-26T14:52:58.704Z
Updated: 2026-06-26T17:42:59.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42384 vulnerable 2026-07-29 00:49:31.911314 WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability
HIGH (7.5)
Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.
Published: 2026-06-15T20:18:33.351Z
Updated: 2026-06-16T14:38:26.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39493 vulnerable 2026-07-29 00:46:18.986874 WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions.
Published: 2026-06-15T20:17:53.649Z
Updated: 2026-06-16T12:34:29.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39447 vulnerable 2026-07-29 00:46:18.918577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39694 vulnerable 2026-06-08 08:01:16.825494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39495 vulnerable 2026-06-08 08:01:16.598596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69315 vulnerable 2026-06-08 07:43:13.378205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.