CVE · Medium

CVE-2026-57812 — Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57812 Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.6 Medium 6.5 < 1.6.12.6 1.6.12.6 2026-07-09

CVE-2026-57812

A security flaw exists in the Simply Schedule Appointments Booking Plugin for WordPress, allowing malicious individuals to bypass access controls due to inadequate verification of user permissions on a specific function within versions prior to 1.6.12.4. This oversight enables unverified users to execute unauthorized actions without proper authorization.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.