Threats tagged 'ghsa-j5pv-734r-xv95'

CVE-2026-16540 is a high-severity vulnerability in the Simply Schedule Appointments WordPress plugin prior to version 1.6.12.6. It involves incorrect authorization that allows unauthenticated users to access personal data of all appointments on the site. Additionally, in premium editions, attackers can permanently delete appointment records. This vulnerability does not require user interaction or privileges to exploit.