Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-110381 EUVD-2026-102234GHSA-rm4r-vvcj-whqr

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Published Oct 15, 2026 · Updated Oct 16, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.

Affected products

VendorProductAffectedFixed
NSquared Simply Schedule Appointments ≤ 1.6.12.35 —

References