IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.6High

CVE-2023-50851WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection

N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin Published: (2 years ago)

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin: from n/a before 1.6.6.1.

Weakness (CWE): CWE-89

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.6.1

References and patches

Recent CVEs in the same product — WordPress plugins & themes

Unscored
CVE-2026-127048

Lazy Blocks < 3.0.0 - Unauthenticated RCE

Custom Block Builder

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary…