CVE Feed

Dashboard / CVE / CVE-2026-94074

CVE-2026-94074

Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

Published:Sep 30, 2026

Last Modified:Sep 30, 2026

EPS:Sep 30, 2026

EPSS Score:

CVSS Score:6.5

Affected Products

No affected product recorded yet

Exploits

https://github.com/Mor-Golan/CVE-2026-94074

Common Weakness Enumeration

CWE-862 Missing Authorization

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-665 Exploitation of Thunderbolt Protection Flaws

References

https://patchstack.com/database/wordpress/plugin/simply-schedule-appointments/vulnerability/wordpress-simply-schedule-appointments-plugin-1-6-12-29-broken-access-control-vulnerability?_s_id=cve

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High