CVE-2026-65508

CriticalCVSS 9.3

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Unauthenticated SQL Injection vulnerability in Simply Schedule Appointments versions up to 1.6.12.10.

An unauthenticated attacker can inject SQL queries, potentially leading to data integrity compromise and unauthorized access.

Update the Simply Schedule Appointments plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.