Medium
CVE-2026-6723
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
CVE-2026-91109
Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter
High
CVE-2026-92245
Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Nonce
High
CVE-2026-89294
Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter
Medium
CVE-2026-94074
Simply Schedule Appointments <= 1.6.12.29 - Missing Authorization
Medium
CVE-2026-94673
Simply Schedule Appointments <= 1.6.12.31 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-84764
Simply Schedule Appointments <= 1.6.12.23 - Cross-Site Request Forgery
Medium
CVE-2026-13358
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
Medium
CVE-2026-16541
Simply Schedule Appointments <= 1.6.12.16 - Authenticated (Team Member+) Information Exposure
Medium
CVE-2026-16540
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-65513
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65508
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection
Medium
CVE-2026-15254
Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure
Medium
CVE-2026-59523
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.11 - Missing Authorization
Medium
CVE-2026-57812
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.4 - Missing Authorization
High
CVE-2026-13400
Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57317
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39447
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6937
Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint
High
CVE-2026-7797
Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
Medium
CVE-2026-7493
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service
Medium
CVE-2026-4807
Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion
Medium
CVE-2026-42384
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure
High
CVE-2026-39493
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.27 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.