CVE Database /
CVE-2026-16540
CVE
CVE-2026-16540 — Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-16540
|
Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.6 |
Incorrect Authorization |
Unknown
|
< 1.6.12.6
|
1.6.12.6 |
2026-08-02 |
—
|
CVE-2026-16540
A vulnerability in the Simply Schedule Appointments WordPress plugin has been discovered, affecting versions prior to 1.6.12.6. The flaw allows unauthorized access to sensitive appointment information, including personal details, for all users on a site. In some cases, premium sites are also vulnerable to permanent deletion of appointments by unauthenticated users.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings