CVE · Medium

CVE-2026-59523 — Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-59523 Simply Schedule Appointments [simply-schedule-appointments] < 1.6.12.0 Medium 6.5 < 1.6.12.0 1.6.12.0 2026-07-09

CVE-2026-59523

A security flaw has been discovered in the Simply Schedule Appointments Booking Plugin for WordPress, affecting versions prior to 1.6.11.12. The issue arises from a lack of capability verification within a specific function, allowing malicious users without authentication to execute an unauthorized operation.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.