What’s Vulnerable › Products
Simply Schedule Appointments vulnerabilities
4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Simply Schedule Appointments version is affected
Latest Simply Schedule Appointments vulnerabilities
- CVE-2026-16541 — Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints (CVSS 6.5)
- CVE-2026-15254 — Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode (CVSS 6.5)
- CVE-2026-16540 — Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint (CVSS 7.5)
- CVE-2026-13400 — Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information (CVSS 6.1)