Threats tagged 'ghsa-9337-jrpr-pg7c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-16541Simply Schedule Appointments (WordPress plugin) · Information Exposure Medium6.5EPSS 0.4%2026-08-15CVE Database V5CVE-2026-16541 The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to see, allowing users with a low-privileged staff role to disclose the names and email addresses of arbitrary registered users. EPSS 0.4%Vulnerability CWE-200 #ghsa-9337-jrpr-pg7c	CVE Database V5	2026-08-15

Page 1 of 1