[ Vendor · 5 CVEs ]
croixhaug
CVEs affecting croixhaug published in the last 30 days, plus any croixhaug CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104000 | 16 Oct 2026 | CVSS 7.2 | croixhaug Simply Schedule AppointmentsThe Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to… | |
| CVE-2026-6723 | 10 Oct 2026 | CVSS 5.3 | croixhaug Simply Schedule AppointmentsThe Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all… | |
| CVE-2026-91109 | 1 Oct 2026 | CVSS 6.5 | croixhaug Simply Schedule AppointmentsThe Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including… | |
| CVE-2026-92245 | 1 Oct 2026 | CVSS 7.5 | croixhaug Simply Schedule AppointmentsThe Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32… | |
| CVE-2026-89294 | 30 Sep 2026 | CVSS 7.5 | croixhaug Simply Schedule AppointmentsThe Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the… |