PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-42384 NSquared CVE debrief

CVE-2026-42384 is a HIGH severity vulnerability (CVSS Score: 7.5) affecting Simply Schedule Appointments plugin versions < 1.6.11.2. The vulnerability is described as Unauthenticated Sensitive Data Exposure.

Vendor
NSquared
Product
Simply Schedule Appointments
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-15
Original CVE updated
2026-06-15
Advisory published
2026-06-15
Advisory updated
2026-06-15

Who should care

Users of Simply Schedule Appointments plugin versions < 1.6.11.2 should update to version 1.6.11.2 or later to mitigate this vulnerability.

Technical summary

The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N and is classified under CWE-201.

Defensive priority

HIGH

Recommended defensive actions

  • Update Simply Schedule Appointments plugin to version 1.6.11.2 or later.
  • Review and restrict access to sensitive data.

Evidence notes

Evidence from Patchstack (ref-4) indicates that the vulnerability exists in Simply Schedule Appointments plugin versions < 1.6.11.2.

Official resources

CVE-2026-42384 was published on 2026-06-15T21:16:54.117Z and modified on 2026-06-15T21:24:32.790Z.