NVD HIGH: CVE-2026-92245 — The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive...
The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the 'recursive' parameter. This makes it possible for unauthenticated attackers to extract customer PII — including names, email addresses, phone numbers, and custom form field data — stored in appointment records, as well as per-appointment publ
CVE-2026-92245