CVE-2026-3045

🗓️ 13 Mar 2026 07:23:38Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Unauthenticated access to admin settings and sensitive data via REST endpoints in Appointment Booking Calendar up to version 1.6.9.29.

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2026-3045	13 Mar 202607:23	–	attackerkb
CNNVD	WordPress plugin Appointment Booking Calendar – Simply Schedule Appointments has a security vulnerability.	13 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-3045 Appointment Booking Calendar <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint	13 Mar 202607:23	–	cvelist
EUVD	EUVD-2026-11758	13 Mar 202621:31	–	euvd
NVD	CVE-2026-3045	13 Mar 202619:55	–	nvd
Patchstack	WordPress Appointment Booking Calendar plugin <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint vulnerability	13 Mar 202607:09	–	patchstack
Positive Technologies	PT-2026-25154	13 Mar 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-3045: Missing Authorization	13 Mar 202600:00	–	rapid7
RedhatCVE	CVE-2026-3045	26 Mar 202615:04	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2026-3045	13 Oct 202600:00	–	vulncheck_kev

Vulners

Node

codepeople appointment_booking_calendarRange≤1.6.9.29wordpress

[
  {
    "vendor": "croixhaug",
    "product": "Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.6.9.29",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.9.21/includes/class-settings-api.php
plugins	www.plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.9.21/includes/class-bootstrap.php
plugins	www.plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.9.21/includes/lib/td-util/class-td-api-model.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5970b8d6-0041-4c30-a6ce-fe67ebf415f5

Parameter	Position	Path	Description	CWE
section	path	/wp-json/ssa/v1/settings/{section}	Settings retrieval relies on nonce_permissions_check() that accepts the public nonce but does not filter restricted fields with remove_unauthorized_settings_for_current_user(), allowing unauthenticated access to admin-only settings (e.g., administrator email, phone, internal tokens, notification configurations, and developer settings) and exposure of appointment tokens.	CWE-862

17 Jun 2026 10:42Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

EPSS0.00301

SSVC