Croixhaug

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 16
    Known Exploited: 0
    0
    Critical Level Threats
    7
    High Level Threats
    9
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-104000

    Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}

    Last Modified: Oct 23, 2026
    Published: Oct 16, 2026

    CVE-2026-6723

    Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token

    Last Modified: Oct 19, 2026
    Published: Oct 10, 2026

    CVE-2026-91109

    Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter

    Last Modified: Oct 03, 2026
    Published: Oct 01, 2026

    CVE-2026-92245

    Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Nonce

    Last Modified: Oct 03, 2026
    Published: Oct 01, 2026

    CVE-2026-13358

    Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure

    Last Modified: Aug 17, 2026
    Published: Aug 16, 2026
    Items Per Page