These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A Cross-site Scripting (XSS) vulnerability exists in Simply Schedule Appointments plugin versions up to 1.6.12.35. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages viewed by other users. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. Defenders should prioritize verifying and updating Simply Schedule Appointments inst [truncated]
The CVE-2026-110381 vulnerability affects the WordPress Simply Schedule Appointments plugin, versions up to and including 1.6.12.35. This vulnerability is an Insecure Direct Object References (IDOR) issue, which could allow an attacker to bypass authorization and access sensitive data. The vulnerability has a CVSS score of 6.3 and is considered MEDIUM severity. Affected users should review and update thei [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-02T12:17:14.800Z and has not been modified since then.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T15:17:15.233Z and has not been modified since then. CVE-2026-65513 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Simply Schedule Appointments plugin versions <= 1.6.12.10. This vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T15:17:14.957Z and has not been modified since then. CVE-2026-65508 is a critical unauthenticated SQL injection vulnerability in Simply Schedule Appointments plugin version 1.6.12.10 or earlier, with a CVSS score of 9.3. This vulnerability allows attackers to inject malicious SQL code, potentially [truncated]
The CVE-2026-59523 vulnerability affects the WordPress Simply Schedule Appointments plugin, versions up to and including 1.6.11.11. This vulnerability is a Missing Authorization issue, which allows attackers to exploit Incorrectly Configured Access Control Security Levels. The CVSS score for this vulnerability is 6.5, indicating a medium severity level.
A Missing Authorization vulnerability was found in the Simply Schedule Appointments plugin for WordPress. This issue, identified as CVE-2026-57812, allows attackers to exploit incorrectly configured access control security levels. The vulnerability affects versions from n/a through 1.6.12.4. The issue arises from a lack of proper authorization checks, potentially allowing unauthorized actions. Users shoul [truncated]
CVE-2026-42384 is a HIGH severity vulnerability (CVSS Score: 7.5) affecting Simply Schedule Appointments plugin versions < 1.6.11.2. The vulnerability is described as Unauthenticated Sensitive Data Exposure.
A critical vulnerability was discovered in the Simply Schedule Appointments plugin, affecting versions up to and including 1.6.9.27. This vulnerability, tracked as CVE-2026-39493, is an unauthenticated SQL injection issue with a CVSS score of 9.3, indicating a high severity level. The vulnerability allows attackers to inject malicious SQL code without requiring authentication, potentially leading to unaut [truncated]
A high-severity Unauthenticated Cross Site Scripting (XSS) vulnerability was discovered in Simply Schedule Appointments plugin versions <= 1.6.10.6. The vulnerability has a CVSS score of 7.1 and is considered HIGH. It allows unauthenticated attackers to inject malicious scripts into the application.
A Missing Authorization vulnerability was found in Simply Schedule Appointments, allowing for Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simply Schedule Appointments versions from n/a through 1.6.10.2. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. The CVE record was published on 2026-04-08T09:16:41.783Z and last modified on 2026-0 [truncated]
A SQL injection vulnerability was discovered in the Simply Schedule Appointments plugin for WordPress, affecting versions up to 1.6.9.27. This issue allows for Blind SQL Injection attacks, with a CVSS score of 8.5 and a HIGH severity rating. The vulnerability is caused by improper neutralization of special elements used in SQL commands. Users of the plugin should be aware of this vulnerability and take st [truncated]