Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-59523 EUVD-2026-43434GHSA-vj2r-ffwf-623h

WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability

Published Jul 13, 2026 · Updated Oct 9, 2026 · Assigned by Patchstack

Vendor: N Squared Product: Simply Schedule Appointments

Description

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.11.11.

Affected products

VendorProductAffectedFixed
NSquared Simply Schedule Appointments ≤ 1.6.11.11 —

References