Skip to content
PluginCanary

Simply Schedule Appointments

by NSquared · 50,000+ active installs · Checked 4 Nov 2026
Healthy12 Warnings

Healthy: vulnerability published 16 Oct 2026, fixed in 1.6.12.37.

84/ 100 Canary Score
Sub-scores for Simply Schedule Appointments
Ownership100
Maintenance100
Security60
Support100
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 1.6.12.37. Update to version 1.6.12.37 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 1.6.12.37. Update to version 1.6.12.37 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 1.6.12.37. Update to version 1.6.12.37 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 1.6.12.0. Update to version 1.6.12.0 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 1.6.12.33. Update to version 1.6.12.33 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 1.6.12.33. Update to version 1.6.12.33 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 29 Sep 2026, fixed in 1.6.12.33. Update to version 1.6.12.33 or later.29 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 1.6.12.33. Update to version 1.6.12.33 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 1.6.12.31. Update to version 1.6.12.31 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 2 Sep 2026, fixed in 1.6.12.24. Update to version 1.6.12.24 or later.2 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 15 Aug 2026, fixed in 1.6.12.11. Update to version 1.6.12.11 or later.15 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 1.6.12.17. Update to version 1.6.12.17 or later.13 Aug 2026Evidence
  • InfoSEC-340 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
croixhaug23 May 2018 to 3 Nov 2026, 531 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
today
Releases, 24 months
125
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Simply Schedule Appointments
Q1 20249
Q2 20248
Q3 202413
Q4 202413
Q1 20258
Q2 202512
Q3 202512
Q4 202511
Q1 20267
Q2 202651
Q3 202613
Q4 20263

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 5 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Oct 2026Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.12.351.6.12.370
15 Oct 2026Simply Schedule Appointments <= 1.6.12.35 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 1.6.12.351.6.12.370
15 Oct 2026Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}7.2<= 1.6.12.351.6.12.370
9 Oct 2026Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token5.3<= 1.6.11.111.6.12.00
30 Sep 2026Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter6.5<= 1.6.12.311.6.12.330
30 Sep 2026Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Nonce7.5<= 1.6.12.321.6.12.330
29 Sep 2026Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter7.5<= 1.6.12.271.6.12.330
24 Sep 2026Simply Schedule Appointments <= 1.6.12.31 - Unauthenticated Insecure Direct Object Reference5.3<= 1.6.12.311.6.12.330
24 Sep 2026Simply Schedule Appointments <= 1.6.12.29 - Missing Authorization5.3<= 1.6.12.291.6.12.310
2 Sep 2026Simply Schedule Appointments <= 1.6.12.23 - Cross-Site Request Forgery4.3<= 1.6.12.231.6.12.240
15 Aug 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure6.5<= 1.6.12.101.6.12.110
13 Aug 2026Simply Schedule Appointments <= 1.6.12.16 - Authenticated (Team Member+) Information Exposure4.3<= 1.6.12.161.6.12.170
6 Aug 2026Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference5.3< 1.6.12.61.6.12.60
28 Jul 2026Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection7.5<= 1.6.12.101.6.12.110
28 Jul 2026Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.12.101.6.12.110
23 Jul 2026Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure4.3<= 1.6.12.101.6.12.110
9 Jul 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.4 - Missing Authorization5.3<= 1.6.12.41.6.12.60
9 Jul 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.11 - Missing Authorization5.3<= 1.6.11.111.6.12.00
6 Jul 2026Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.12.31.6.12.40
26 Jun 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.12.21.6.12.40
28 May 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.10.61.6.11.00
27 May 2026Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint5.3<= 1.6.11.81.6.11.90
27 May 2026Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter7.5<= 1.6.11.81.6.11.90
26 May 2026Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service5.3<= 1.6.11.51.6.11.70
6 May 2026Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion6.5<= 1.6.10.61.6.11n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Simply Schedule Appointments
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20254.5
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q2 2026.

Rating distribution
5 star153
4 star1
3 star1
2 star0
1 star0

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Simply Schedule Appointments
4 May 20263,823
11 May 202633,960
18 May 202635,066
25 May 202634,444
1 Jun 202660,302
8 Jun 20265,489
15 Jun 202631,297
22 Jun 202633,167
29 Jun 202632,720
6 Jul 202634,802
13 Jul 202632,336
20 Jul 202646,419
27 Jul 20267,115
3 Aug 202631,960
10 Aug 202631,974
17 Aug 202633,193
24 Aug 202629,951
31 Aug 202631,327
7 Sep 202629,816
14 Sep 202630,933
21 Sep 202647,683
28 Sep 20265,570
5 Oct 20264,684
12 Oct 202641,955
19 Oct 20265,597
26 Oct 20265,539
2 Nov 2026491

Weekly downloads over the last 4 weeks are 50% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version1.6.13.0
AuthorNSquared
Added23 May 2018
Last updated3 Nov 2026
Active installs50,000+
Requires WordPress5.1
Tested up to7.1.4
Requires PHP7.4
CategoryBookings & Scheduling > Appointment Scheduling
Tagsbooking, scheduling, appointments, booking system, appointment booking

Other plugins by this author: Interactive Image Map Plugin - Draw Attention, Plugin Detective - Troubleshooting Conflicts, Better Business Hours

Questions

Is Simply Schedule Appointments still maintained?

Simply Schedule Appointments was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Simply Schedule Appointments safe?

Simply Schedule Appointments has no open unpatched vulnerabilities on record. 40 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Simply Schedule Appointments?

The wordpress.org author is NSquared. Recent committers: croixhaug, plugin-master. We have recorded no ownership change.

What can I use instead of Simply Schedule Appointments?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 4 Nov 2026.Report a data issue