CVE-2026-1704
IDOR Vulnerability in Simply Schedule Appointments Plugin Exposes Data
Publication date: 2026-03-13
Last updated on: 2026-03-13
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| simply_schedule_appointments | appointment_booking_calendar | to 1.6.9.29 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability exists in the Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress, affecting all versions up to and including 1.6.9.29.
It is an Insecure Direct Object Reference (IDOR) issue caused by the `get_item_permissions_check` method granting access to users with the `ssa_manage_appointments` capability without verifying if the user owns the requested appointment.
As a result, authenticated users with custom-level access or higher (such as Team Members) can view appointment records of other staff members and access sensitive customer personally identifiable information by manipulating the appointment ID parameter.
How can this vulnerability impact me? :
This vulnerability allows unauthorized users with certain permissions to access appointment records that do not belong to them.
The impact includes exposure of sensitive customer personally identifiable information (PII), which could lead to privacy violations, loss of customer trust, and potential misuse of the data.
Since the vulnerability requires authenticated access with specific capabilities, it may be exploited by insiders or compromised accounts.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know