Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and including, 1.6.9.27. This is due to the `db_where_conditions` method in the `TD_DB_Model` class failing to prevent the `append_where_sql` parameter from being passed through JSON request bodies, while only checking for its presence in the `$_REQUEST` superglobal. This makes it possible for unauthenticated attackers to append arbitrary SQL commands to queries and extract sensitive information from the database via the `append_where_sql` parameter in JSON payloads granted they have obtained a valid `public_token` that is inadvertently exposed during the booking flow.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-12 | 1 | General1 |
| 2026-03-15 | 1 | Disclosure1 |
CVE-2026-1708 The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and incl… https://www.cve.org/CVERecord?id=CVE-2026-1708
Post summary
The post announces a CVE (CVE-2026-1708) identifying a blind SQL injection flaw in the Simply Schedule Appointments Booking Plugin for WordPress affecting all versions up to the stated release.
CVE Alert: CVE-2026-1708 - croixhaug - Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin - https://www.redpacketsecurity.com/cve-alert-cve-2026-1708-croixhaug-appointment-booking-calendar-simply-schedule-appointments-booking-plugin/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-1708 #croixhaug #appointment-booking-calendar-simply-schedule-appointments-booking-plugin
Post summary
Tweet announces CVE-2026-1708 for the Appointment Booking Calendar plugin and provides a link for more information, but contains no technical, patch, or exploitation details.