CVE Catalog
CVE-2026-42384
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
The Simply Schedule Appointments application versions below 1.6.11.2 have a vulnerability that allows unauthorized access to sensitive data.
Risk Assessment
Organizations may be exposed to the disclosure of confidential information, potentially leading to privacy breaches and loss of customer trust.
Recommendation
It is recommended to update the application to version 1.6.11.2 or later to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.

