Skip to content
OpenAdvisories

Vendor

N Squared

20 known vulnerabilities.

Products

Simply Schedule Appointments 18 Draw Attention 1 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2026-110382

    WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12…

    N Squared Simply Schedule Appointments
  • High 8.8
    CVE-2026-84764

    WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.

    N Squared Simply Schedule Appointments
  • High 7.1
    CVE-2026-65513

    WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.

    N Squared Simply Schedule Appointments
  • High 7.1
    CVE-2026-57317

    WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.

    N Squared Simply Schedule Appointments
  • High 7.5
    CVE-2026-42384

    WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.

    N Squared Simply Schedule Appointments
  • High 7.1
    CVE-2026-39447

    WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.10.6 versions.

    N Squared Simply Schedule Appointments
  • High 8.5
    CVE-2026-39495

    WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Blind SQL Injection.This issue affects Simply Schedule Appointments: from n/a throu…

    N Squared Simply Schedule Appointments
  • High 7.1
    CVE-2024-22311

    WordPress Simply Schedule Appointments plugin <= 1.6.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N Squared Simply Schedule Appointments allows Reflected XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.6.20.

    N Squared Simply Schedule Appointments
  • High 7.6
    CVE-2023-50851

    WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar — Simply Schedule Appoin…

    N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin