WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Simply Schedule Appointments

Unlimited appointments, booking calendars, and notifications. Powerful appointment booking plugin and booking system. Start scheduling for free today!

49Reported vulnerabilities
8.8Highest CVSS score
1.6.12.17Latest version
50,000+Active installs

What to do now

Update Simply Schedule Appointments to 1.6.12.37 or later. 49 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-7129 High 7.2 1.1% Before 1.6.7.43 1.6.7.43 September 13, 2024
CVE-2022-2373 Medium 5.3 1.9% Before 1.5.7.7 1.5.7.7 August 29, 2022
CVE-2024-7877 Medium 4.8 0.4% Before 1.6.7.55 1.6.7.55 November 5, 2024
CVE-2024-7876 Medium 4.8 0.4% Before 1.6.7.55 1.6.7.55 November 5, 2024
CVE-2024-2342 High 8.8 0.6% Before 1.6.7.9 1.6.7.9 April 9, 2024
CVE-2022-2374 Medium 4.8 0.7% Before 1.5.7.7 1.5.7.7 August 29, 2022
CVE-2026-89294 High 7.5 0.6% 0 to 1.6.12.27 (inclusive) 1.6.12.33 September 30, 2026
CVE-2026-7797 High 7.5 0.7% 0 to 1.6.11.8 (inclusive) 1.6.11.9 May 28, 2026
CVE-2026-3658 High 7.5 0.5% 0 to 1.6.10.0 (inclusive) 1.6.10.2 March 19, 2026
CVE-2026-3045 High 7.5 0.5% 0 to 1.6.9.29 (inclusive) 1.6.10.0 March 13, 2026
CVE-2026-92245 High 7.5 0.4% 0 to 1.6.12.32 (inclusive) 1.6.12.33 October 1, 2026
CVE-2026-65508 High 7.5 0.4% 1.6.12.10 and earlier 1.6.12.11 July 28, 2026
CVE-2026-39493 High 7.5 0.4% 1.6.9.27 and earlier 1.6.9.29 April 8, 2026
CVE-2026-1708 High 7.5 0.4% 0 to 1.6.9.27 (inclusive) 1.6.9.29 March 11, 2026
CVE-2025-12166 High 7.5 0.3% 1.6.9.9 and earlier 1.6.9.13 January 14, 2026
CVE-2025-1119 High 7.3 0.5% 0 to 1.6.8.5 (inclusive) 1.6.8.7 March 13, 2025
CVE-2026-65513 High 7.2 0.3% 1.6.12.10 and earlier 1.6.12.11 July 28, 2026
CVE-2026-13400 High 7.2 0.3% 1.6.12.3 and earlier 1.6.12.4 July 6, 2026
CVE-2026-39447 High 7.2 0.3% 1.6.10.6 and earlier 1.6.11.0 May 28, 2026
CVE-2026-104000 High 7.2 0.2% 0 to 1.6.12.35 (inclusive) 1.6.12.37 October 16, 2026
CVE-2026-57317 High 7.2 0.2% 1.6.12.2 and earlier 1.6.12.4 June 26, 2026
CVE-2026-13358 Medium 6.5 0.7% 0 to 1.6.12.10 (inclusive) 1.6.12.11 August 16, 2026
CVE-2024-2341 Medium 6.5 0.6% Before 1.6.7.9 1.6.7.9 April 9, 2024
CVE-2023-50851 Medium 6.6 0.5% Before 1.6.6.1 1.6.6.1 December 21, 2023
CVE-2026-91109 Medium 6.5 0.3% 0 to 1.6.12.31 (inclusive) 1.6.12.33 October 1, 2026
CVE-2026-4807 Medium 6.5 0.5% 0 to 1.6.10.6 (inclusive) 1.6.11 May 7, 2026
CVE-2026-39495 Medium 6.5 0.4% 1.6.9.27 and earlier 1.6.9.29 March 26, 2026
CVE-2025-11723 Medium 6.5 0.2% 1.6.9.5 and earlier 1.6.9.6 January 5, 2026
CVE-2025-4667 Medium 6.4 0.3% 0 to 1.6.8.30 (inclusive) 1.6.8.32 June 14, 2025
CVE-2024-13431 Medium 6.1 0.4% Before 1.6.8.5 1.6.8.5 March 7, 2025
CVE-2024-22311 Medium 6.1 0.4% 1.6.6.20 and earlier 1.6.6.24 March 26, 2024
CVE-2026-6937 Medium 5.3 0.6% 0 to 1.6.11.8 (inclusive) 1.6.11.9 May 28, 2026
CVE-2024-4288 Medium 5.4 0.3% Before 1.6.7.18 1.6.7.18 May 16, 2024
CVE-2026-6723 Medium 5.3 0.2% 0 to 1.6.11.11 (inclusive) 1.6.12.0 October 10, 2026
CVE-2026-94673 Medium 5.3 0.2% 1.6.12.31 and earlier 1.6.12.33 September 24, 2026
CVE-2026-94074 Medium 5.3 0.2% 1.6.12.29 and earlier 1.6.12.31 September 24, 2026
CVE-2026-16540 Medium 5.3 0.4% Before 1.6.12.6 1.6.12.6 August 6, 2026
CVE-2026-57812 Medium 5.3 0.3% 1.6.12.4 and earlier 1.6.12.6 July 9, 2026
CVE-2026-59523 Medium 5.3 0.3% 1.6.11.11 and earlier 1.6.12.0 July 9, 2026
CVE-2026-7493 Medium 5.3 0.4% 0 to 1.6.11.5 (inclusive) 1.6.11.7 May 27, 2026
CVE-2026-42384 Medium 5.3 0.4% Before 1.6.11.2 1.6.11.2 April 27, 2026
CVE-2026-39694 Medium 5.3 0.3% 1.6.11.0 and earlier 1.6.11.1 February 26, 2026
CVE-2025-69315 Medium 5.3 0.2% 1.6.9.15 and earlier 1.6.9.17 January 20, 2026
CVE-2025-13754 Medium 5.3 0.3% 0 to 1.6.9.16 (inclusive) 1.6.9.17 December 19, 2025
CVE-2024-1760 Medium 4.7 0.3% Before 1.6.6.24 1.6.6.24 March 6, 2024
CVE-2026-84764 Medium 4.3 0.2% 1.6.12.23 and earlier 1.6.12.24 September 2, 2026
CVE-2026-16541 Medium 4.3 0.4% 1.6.12.16 and earlier 1.6.12.17 August 13, 2026
CVE-2026-15254 Medium 4.3 0.3% 1.6.12.10 and earlier 1.6.12.11 July 23, 2026
CVE-2026-1704 Medium 4.3 0.2% 0 to 1.6.9.29 (inclusive) 1.6.10.0 March 13, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.