NSquared

Products

ProductCVEsExploitedLatest
Simply Schedule Appointments16–Oct 18, 2026
Draw Attention1–Jan 2, 2025

Exploited and recent CVEs

  • CVE-2026-110382 High 7.1 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-110381 Medium 6.3 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-94673 Medium 5.3 WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-94074 Medium 6.5 WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability 0.2%
  • CVE-2026-84764 High 8.8 WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-65513 High 7.1 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65508 Critical 9.3 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability 0.4%
  • CVE-2026-59523 Medium 6.5 WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57812 Medium 6.5 WordPress Simply Schedule Appointments plugin <= 1.6.12.4 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57317 High 7.1 WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-42384 High 7.5 WordPress Simply Schedule Appointments plugin < 1.6.11.2 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-39493 Critical 9.3 WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability 0.4%
  • CVE-2026-39447 High 7.1 WordPress Simply Schedule Appointments plugin <= 1.6.10.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39694 Medium 5.3 WordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39495 High 8.5 WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability 0.3%
  • CVE-2025-69315 Medium 6.5 WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability 0.2%
  • CVE-2023-46616 Medium 5.4 WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability 0.3%