Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-69315 EUVD-2026-3868GHSA-wgrv-6j54-h2xj

WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.9.15.

Affected products

VendorProductAffectedFixed
NSquared Simply Schedule Appointments ≤ 1.6.9.15 —

References