Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.12.2
CVSS: 7.2/10
Correctif: 1.6.12.4

26 juin 2026

Lire

ÉlevéeCVSS 7.2

CVE-2026-39447

XSS stocké, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.10.6)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.10.6
CVSS: 7.2/10
Correctif: 1.6.11.0

Défaut de contrôle d'accès, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.11.8)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.11.8
CVSS: 5.3/10
Correctif: 1.6.11.9

Injection SQL, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.11.8)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.11.8
CVSS: 7.5/10
Correctif: 1.6.11.9

Déni de service, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.11.5)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.11.5
CVSS: 5.3/10
Correctif: 1.6.11.7

Faille de sécurité, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.10.6)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.10.6
CVSS: 6.5/10
Correctif: 1.6.11

Faille de sécurité, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.11.2)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.11.2
CVSS: 5.3/10
Correctif: 1.6.11.2

Injection SQL, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.9.27)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.9.27
CVSS: 7.5/10
Correctif: 1.6.9.29

Injection SQL, authentifié (Contributeur+), dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.9.27)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.9.27
CVSS: 6.5/10
Correctif: 1.6.9.29

Injection SQL, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.10.0)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.10.0
CVSS: 7.5/10
Correctif: 1.6.10.2

Défaut de contrôle d'accès, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.9.29)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.9.29
CVSS: 7.5/10
Correctif: 1.6.10.0

12 mars 2026

Lire

1 – 12 sur 33 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement