CVE-2026-59523: WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.11.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Simply Schedule Appointmentsto a version that resolves this vulnerability.Fixed in 1.6.12.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59523?
The severity of CVE-2026-59523 is classified as medium with a score of 6.5.
How does CVE-2026-59523 affect Simply Schedule Appointments?
CVE-2026-59523 affects Simply Schedule Appointments by allowing incorrect access control configurations that can be exploited.
What versions of the Simply Schedule Appointments plugin are affected by CVE-2026-59523?
CVE-2026-59523 affects Simply Schedule Appointments versions from n/a through 1.6.11.11.
Is there a fix available for CVE-2026-59523?
To fix CVE-2026-59523, it is recommended to update Simply Schedule Appointments to a version later than 1.6.11.11.
What type of vulnerability is CVE-2026-59523?
CVE-2026-59523 is classified as a Broken Access Control vulnerability.