CVE Database /
CVE-2024-7129
CVE · High
CVE-2024-7129 — Simply Schedule Appointments [simply-schedule-appointments] < 1.6.7.43
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-7129
|
Simply Schedule Appointments [simply-schedule-appointments] < 1.6.7.43 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
High
7.2
|
< 1.6.7.43
|
1.6.7.43 |
2024-08-23 |
—
|
CVE-2024-7129
The Simply Schedule Appointments Booking Plugin for WordPress contains a security flaw that allows malicious users with administrative privileges or higher to inject arbitrary code into the plugin's templates, enabling them to execute unauthorized commands on the hosting server in versions prior to 1.6.7.42. This vulnerability can be exploited by authenticated attackers to gain control over the system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings