CVE-2026-65508

CriticalCVSS 9.3

Published: 06/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection vulnerability in Simply Schedule Appointments versions up to 1.6.12.10.

An unauthenticated attacker can inject SQL queries, potentially leading to data integrity compromise and unauthorized access.

Update the Simply Schedule Appointments plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.