CyberRota Yorumu
Saldırganın giriş yapmış olması gerekebilir.
CVE
CVE-2026-16540
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress
Orijinal NVD Açıklaması
The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operation to the requester's own records, allowing unauthenticated users to retrieve the personal data of all appointments across the site and, on premium editions, to permanently delete them.