Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Simply Schedule Appointments – WordPress Booking Plugin 1.5.7.7 Clear all filters
TI-2022-02190 CVE-2022-2374 · GHSA-v5j3-cc7g-2rf3

Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00692 Published 2022-08-29 Fixed in 1.5.7.7 CWE-79
TI-2022-02189 CVE-2022-2373 · GHSA-v22h-7mrq-rcj9

Simply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure

Priority LOW 28

The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated users to retrieve WordPress users details such as name and email address

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01982 Published 2022-08-29 Fixed in 1.5.7.7 CWE-862