Authorization Bypass Vulnerability in NSquared Simply Schedule Appointments

CVE-2026-110381

What is CVE-2026-110381?

The NSquared Simply Schedule Appointments plugin is vulnerable to an authorization bypass due to improperly configured access controls. This flaw allows malicious users to exploit user-controlled keys, potentially gaining unauthorized access to sensitive functions or information within the application. Affected versions include those prior to 1.6.12.35, necessitating immediate updates to mitigate security risks.

References