Simply Schedule Appointments

84 Quality Score

Active Installs

21/30

With 60,000 active installs and a popularity score of 71, this plugin has solid but not dominant reach compared to category leaders like LatePoint at 100,000 installs.

Update Freshness

25/25

A perfect 100 maintenance score, backed by an update as recent as July 2026, signals a development team that actively patches and improves the plugin.

User Rating

15/15

A 100 out of 100 user rating across 155 reviews is exceptional and suggests most users are highly satisfied with the experience.

Support Health

8/15

Support health sits at 50, with only 7 threads total but a 100% resolution rate, which is encouraging but the low thread volume means the sample is small.

WP Compatibility

15/15

A perfect 100 compatibility score, paired with support for WordPress 5.1 through 7.0.1 and PHP 7.4, shows broad and current technical coverage.

Scores higher than 92% of indexed plugins

About

Unlimited appointments, booking calendars, and notifications. Powerful appointment booking plugin and booking system. Start scheduling for free today!

Active Installs 50k+

Rating ★★★★★ 5/5

Last Updated 2026-09-23 12:57pm GMT

Requires WordPress 5.1+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

42 known vulnerabilities, all patched

15 High 27 Medium

Most recent: September 2, 2026

View details ▸

Simply Schedule Appointments <= 1.6.12.23 - Cross-Site Request Forgery Medium

September 2, 2026 Patched in ["1.6.12.24"] CVE-2026-84764

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure Medium

August 15, 2026 Patched in ["1.6.12.11"] CVE-2026-13358

Simply Schedule Appointments <= 1.6.12.16 - Authenticated (Team Member+) Information Exposure Medium

August 13, 2026 Patched in ["1.6.12.17"] CVE-2026-16541

Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference Medium

August 6, 2026 Patched in ["1.6.12.6"] CVE-2026-16540

Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection High

July 28, 2026 Patched in ["1.6.12.11"] CVE-2026-65508

Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated Stored Cross-Site Scripting High

July 28, 2026 Patched in ["1.6.12.11"] CVE-2026-65513

Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure Medium

July 23, 2026 Patched in ["1.6.12.11"] CVE-2026-15254

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.4 - Missing Authorization Medium

July 9, 2026 Patched in ["1.6.12.6"] CVE-2026-57812

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.11 - Missing Authorization Medium

July 9, 2026 Patched in ["1.6.12.0"] CVE-2026-59523

Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting High

July 6, 2026 Patched in ["1.6.12.4"] CVE-2026-13400

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting High

June 26, 2026 Patched in ["1.6.12.4"] CVE-2026-57317

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting High

May 28, 2026 Patched in ["1.6.11.0"] CVE-2026-39447

Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint Medium

May 27, 2026 Patched in ["1.6.11.9"] CVE-2026-6937

Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter High

May 27, 2026 Patched in ["1.6.11.9"] CVE-2026-7797

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service Medium

May 26, 2026 Patched in ["1.6.11.7"] CVE-2026-7493

Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion Medium

May 6, 2026 Patched in ["1.6.11"] CVE-2026-4807

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure Medium

April 27, 2026 Patched in ["1.6.11.2"] CVE-2026-42384

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.27 - Unauthenticated SQL Injection High

April 8, 2026 Patched in ["1.6.9.29"] CVE-2026-39493

Simply Schedule Appointments <= 1.6.9.27 - Authenticated (Contributor+) SQL Injection Medium

March 26, 2026 Patched in ["1.6.9.29"] CVE-2026-39495

Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parameter High

March 18, 2026 Patched in ["1.6.10.2"] CVE-2026-3658

Appointment Booking Calendar <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint High

March 12, 2026 Patched in ["1.6.10.0"] CVE-2026-3045

Appointment Booking Calendar <= 1.6.9.29 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure Medium

March 12, 2026 Patched in ["1.6.10.0"] CVE-2026-1704

Appointment Booking Calendar <= 1.6.9.27 - Unauthenticated SQL Injection via 'append_where_sql' Parameter High

March 10, 2026 Patched in ["1.6.9.29"] CVE-2026-1708

Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization Medium

February 26, 2026 Patched in ["1.6.11.1"] CVE-2026-39694

Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization Medium

January 20, 2026 Patched in ["1.6.9.17"] CVE-2025-69315

Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters High

January 14, 2026 Patched in ["1.6.9.13"] CVE-2025-12166

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure Medium

January 5, 2026 Patched in ["1.6.9.6"] CVE-2025-11723

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure Medium

December 18, 2025 Patched in ["1.6.9.17"] CVE-2025-13754

Simply Schedule Appointments <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes Medium

June 13, 2025 Patched in ["1.6.8.32"] CVE-2025-4667

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution High

March 12, 2025 Patched in ["1.6.8.7"] CVE-2025-1119

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting Medium

March 6, 2025 Patched in ["1.6.8.5"] CVE-2024-13431

Appointment Booking Calendar <= - Authenticated (Admin+) Stored Cross-Site Scripting via Notification Settings Medium

October 15, 2024 Patched in ["1.6.7.55"] CVE-2024-7877

Appointment Booking Calendar <= 1.6.7.53 - Authenticated (Admin+) Stored Cross-Site Scripting via Appointment Settings Medium

October 15, 2024 Patched in ["1.6.7.55"] CVE-2024-7876

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution High

August 23, 2024 Patched in ["1.6.7.43"] CVE-2024-7129

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 15, 2024 Patched in ["1.6.7.18"] CVE-2024-4288

Simply Schedule Appointments <= 1.6.6.20 - Reflected Cross-Site Scripting Medium

March 26, 2024 Patched in ["1.6.6.24"] CVE-2024-22311

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode High

March 20, 2024 Patched in ["1.6.7.9"] CVE-2024-2342

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection High

March 20, 2024 Patched in ["1.6.7.9"] CVE-2024-2341

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset Medium

March 5, 2024 Patched in ["1.6.6.24"] CVE-2024-1760

Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection Medium

December 21, 2023 Patched in ["1.6.6.1"] CVE-2023-50851

Simply Schedule Appointments <= 1.5.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

August 8, 2022 Patched in ["1.5.7.7"] CVE-2022-2374

Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure Medium

August 8, 2022 Patched in ["1.5.7.7"] CVE-2022-2373

What It Does

Appointment Booking Calendar, also known as Simply Schedule Appointments, lets WordPress site owners embed booking calendars directly on their pages so visitors can self-serve appointments. It handles unlimited bookings, sends notifications to both staff and customers, and integrates with calendars and payment tools to keep schedules in sync.

Who It's For

This plugin fits small to mid-sized service businesses, coaches, consultants, and clinics that want a self-hosted booking system without paying per-appointment SaaS fees. It works well for site owners comfortable with shortcodes or block-based setup who need a calendar that lives inside their own WordPress install.

Who Should Skip It

Sites needing deep enterprise features like multi-staff resource pooling, complex payment routing, or advanced CRM pipelines will find this plugin too lightweight. Anyone running an offline-only operation or who does not actually take appointments should skip it entirely.

The Bottom Line

Simply Schedule Appointments delivers a well-maintained, highly rated booking experience with an overall quality score of 83.9, and its 100% support resolution rate is reassuring despite the small thread count. It is a strong middle-of-the-pack option that outranks Bookly and WP Booking System but trails LatePoint and Amelia on raw features. Recommended for service businesses that want reliable appointment scheduling without enterprise complexity.

Pick LatePoint if you want a more polished admin interface and stronger built-in reporting, and you are comfortable with its slightly higher learning curve.

Booking for Appointments and Events Calendar - Amelia 83/100

Pick Amelia when you need event ticketing, group bookings, or a more visual dashboard, especially if staff scheduling across multiple locations matters.

Booking Calendar 83/100

Pick the original Booking Calendar plugin if you only need a simple date-based availability grid without staff or service management.

Online Scheduling and Appointment Booking System - Bookly 82/100

Pick Bookly if you want a long-standing plugin with a large add-on marketplace for SMS reminders, payments, and integrations.

WP Booking System - Booking Calendar 81/100

Pick WP Booking System if your primary need is a clean, embeddable calendar widget rather than a full scheduling workflow.