Unknown Simply Schedule Appointments

• CVE-2026-16541 Medium 6.5 Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints 0.4%
• CVE-2026-15254 Medium 6.5 Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode 0.3%
• CVE-2026-16540 High 7.5 Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint 0.4%
• CVE-2026-13400 Medium 6.1 Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information 0.3%