Now officially on WordPress.org

CVE Database / CVE-2026-15254

CVE

CVE-2026-15254 — Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.11

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-15254 Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.11 Incorrect Authorization Unknown < 1.6.12.11 1.6.12.11 2026-08-03 —

CVE-2026-15254

A vulnerability exists in the Simply Schedule Appointments plugin prior to version 1.6.12.11, where an administrative function is accessible without proper authorization checks. This oversight allows users with a Contributor role or higher to view sensitive appointment information for all customers on the website, including contact details and notes.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings