cleantalk
Vulnerabilities and Security Researches

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin, CVE-2026-94673

CVE, Research URL

CVE-2026-94673

Published on
Sep 30, 2026
Research Description
Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.
Affected versions
max 1.6.12.33.
Status
vulnerable