Skip to content
Threat Feed
Subscribe

Product

Simply-Schedule-Appointments (<= 1.6.12.29)

1 brief RSS
high advisory

Simply Schedule Appointments: Broken access control (CVE-2026-94074)

A public exploit exists for CVE-2026-94074 in the Simply Schedule Appointments WordPress plugin, allowing unauthenticated attackers to bypass REST API authorization and delete or retrieve sensitive customer appointment data.

simply-schedule-appointments
1r 1t 1c