Simply Schedule Appointments

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

481 searches this plugin appeared in over the last 90 days, 20 listed. 400 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 99% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3 months ago and a band this size takes about a year or more to cross, so the real count is still just under 60K.

1. ★★★★★ sparisi

   5mo ago

   Great plug in for basic appointment setting. Excellent customer service if you have any questions. Responsive to enhancement requests!

   Read on wp.org ↗
2. ★★★★★ Luckydogie

   10mo ago

   I was looking for a plugin to allow our customers to setup an appointment with our technician. I found this plugin and decided to give it a try after reading all the reviews. It was so simple and I was able to make my first appointment setup and running within 30 minutes – and it works without any issues. The amazing part about this plugin is their support. I have a question about the calendar syncs function and I reached out to the support – I got a response from their team within an hour, even though I haven’t upgraded to their pro version yet. I highly recommend this product to anyone who needs a simple appointment plugin for the WordPress website.

   Read on wp.org ↗
3. ★★★★★ lkarchner

   11mo ago

   I had to use the Simply Schedule Appointments plugin yesterday. I didn’t expect much, as there are lots of shoddy plugins out there. I found myself pleasantly surprised to find that it was very well written and super easy to use. No bugs, no issues. I wish everyone coded plugins this thoroughly. Cheers! 🙂

   Read on wp.org ↗
4. ★★★★★ usman738

   12mo ago

   Simply Schedule Appointments plugin was super easy to set up and has all the booking options I needed. The integrations work great, and the support team is always quick to help. Definitely recommend it!

   Read on wp.org ↗
5. ★★★★★ tdhmonte68

   1.1y ago

   My client business has already schedule more than 100 plus appointment in a short amount of time. The plugin works great.

   Read on wp.org ↗
6. ★★★★★ arbpen

   1.2y ago

   One thing I love about this plugin is that it takes query strings. We have out own inhouse appointment system and I generate the required information in a query string and pass it to SSA. SSA is also easy to configure although advanced set up may require a little help. Speaking of help, when I miscoded something, SSA’s support team was on it and found my error right away with an easy fix. SSA blows Calendly away. We have also used a HIPPA compliant system and it wasn’t nearly as good as this. If you are looking for an excellent scheduling plugin, this is the one to get.

   Read on wp.org ↗
7. ★★★★★ emafd

   1.3y ago

   Excellent plugin. I’ve been using it for 2 years now and it’s working very well, in sync with Google calendar. What I especially love is their wonderful and friendly client support, always here to help.

   Read on wp.org ↗
8. ★★★★★ rtenny

   1.4y ago

   After I have tried several booking plugins, which are far too complicated for what I needed, I found this little gem. It’s easy to set up as I only need one type of booking with one user. It looks great on the page and is easy to use for the end user. This is the ideal plugin if you want something that works straight out of the box within five minutes.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-10-13 Version 1.6.12.37 Use add_block() when building the Google Calendar blocked schedule Stop scripts planted in the debug log from running when the log is viewed Return a zero rectangle from the checkbox and radio ripple adapters Prevent sav 1.6.12.37
2. 2026-09-29 Version 1.6.12.35 Fix google calendar events with same start time 1.6.12.35
3. 2026-09-22 Version 1.6.12.33 Update moment-timezone dependency to version 0.6.3 across all relevant packages Team Booking: re-check the newly selected team member’s availability when rescheduling as a client Keep Google Calendar blocks in place whil 1.6.12.33
4. 2026-09-08 Version 1.6.12.29 Security audit: lock down staff REST reads, rate-limit license key checks, sanitize GCal OAuth error param Support URL: detach orphaned payments and recalculate appointment totals (#255434) 1.6.12.29
5. 2026-09-01 Version 1.6.12.26 Stop charging Stripe customers for appointments SSA then refuses to record (#250928) 1.6.12.26
6. 2026-08-25 Version 1.6.12.24 Check the appointment’s own resource when it is rescheduled Harden Patchstack CSRF residuals: purge CSV [3], template token leak [5], unrevocable read token [6] 1.6.12.24

All 51 disclosed vulnerabilities are patched in the current version (1.6.12.37). Sites still on an older version should update.

1. Patched High · 7.2 Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-10-16 CVE-2026-110382 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.12.35 Patched in 1.6.12.37
2. Patched Medium · 4.3 Simply Schedule Appointments <= 1.6.12.35 - Authenticated (Contributor+) Insecure Direct Object Reference ↗
   2026-10-15 CVE-2026-110381 Authorization Bypass Through User-Controlled Key Affects <= 1.6.12.35 Patched in 1.6.12.37
3. Patched High · 7.2 Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id} ↗
   2026-10-15 CVE-2026-104000 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.12.35 Patched in 1.6.12.37
4. Patched Medium · 5.3 Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token ↗
   2026-10-09 CVE-2026-6723 Incorrect Authorization Affects <= 1.6.11.11 Patched in 1.6.12.0
5. Patched Medium · 6.5 Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter ↗
   2026-09-30 CVE-2026-91109 Authorization Bypass Through User-Controlled Key Affects <= 1.6.12.31 Patched in 1.6.12.33
6. Patched High · 7.5 Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Nonce ↗
   2026-09-30 CVE-2026-92245 Missing Authorization Affects <= 1.6.12.32 Patched in 1.6.12.33
7. Patched High · 7.5 Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameter ↗
   2026-09-29 CVE-2026-89294 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 1.6.12.27 Patched in 1.6.12.33
8. Patched Medium · 5.3 Simply Schedule Appointments <= 1.6.12.31 - Unauthenticated Insecure Direct Object Reference ↗
   2026-09-24 CVE-2026-94673 Authorization Bypass Through User-Controlled Key Affects <= 1.6.12.31 Patched in 1.6.12.33
9. Patched Medium · 5.3 Simply Schedule Appointments <= 1.6.12.29 - Missing Authorization ↗
   2026-09-24 CVE-2026-94074 Missing Authorization Affects <= 1.6.12.29 Patched in 1.6.12.31
10. Patched Medium · 4.3 Simply Schedule Appointments <= 1.6.12.23 - Cross-Site Request Forgery ↗
    2026-09-02 CVE-2026-84764 Cross-Site Request Forgery Affects <= 1.6.12.23 Patched in 1.6.12.24
11. Patched Medium · 6.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure ↗
    2026-08-15 CVE-2026-13358 Authorization Bypass Through User-Controlled Key Affects <= 1.6.12.10 Patched in 1.6.12.11
12. Patched Medium · 4.3 Simply Schedule Appointments <= 1.6.12.16 - Authenticated (Team Member+) Information Exposure ↗
    2026-08-13 CVE-2026-16541 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.6.12.16 Patched in 1.6.12.17
13. Patched Medium · 5.3 Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference ↗
    2026-08-06 CVE-2026-16540 Authorization Bypass Through User-Controlled Key Affects < 1.6.12.6 Patched in 1.6.12.6
14. Patched High · 7.5 Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection ↗
    2026-07-28 CVE-2026-65508 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.12.10 Patched in 1.6.12.11
15. Patched High · 7.2 Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-28 CVE-2026-65513 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.12.10 Patched in 1.6.12.11
16. Patched Medium · 4.3 Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure ↗
    2026-07-23 CVE-2026-15254 Incorrect Authorization Affects <= 1.6.12.10 Patched in 1.6.12.11
17. Patched Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.4 - Missing Authorization ↗
    2026-07-09 CVE-2026-57812 Missing Authorization Affects <= 1.6.12.4 Patched in 1.6.12.6
18. Patched Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.11 - Missing Authorization ↗
    2026-07-09 CVE-2026-59523 Missing Authorization Affects <= 1.6.11.11 Patched in 1.6.12.0
19. Patched High · 7.2 Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-06 CVE-2026-13400 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.12.3 Patched in 1.6.12.4
20. Patched High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-06-26 CVE-2026-57317 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.12.2 Patched in 1.6.12.4
21. Patched High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-05-28 CVE-2026-39447 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.10.6 Patched in 1.6.11.0
22. Patched Medium · 5.3 Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint ↗
    2026-05-27 CVE-2026-6937 Missing Authorization Affects <= 1.6.11.8 Patched in 1.6.11.9
23. Patched High · 7.5 Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter ↗
    2026-05-27 CVE-2026-7797 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.11.8 Patched in 1.6.11.9
24. Patched Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service ↗
    2026-05-26 CVE-2026-7493 Uncontrolled Resource Consumption Affects <= 1.6.11.5 Patched in 1.6.11.7
25. Patched Medium · 6.5 Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion ↗
    2026-05-06 CVE-2026-4807 Missing Authorization Affects <= 1.6.10.6 Patched in 1.6.11
26. Patched Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure ↗
    2026-04-27 CVE-2026-42384 Exposure of Sensitive Information to an Unauthorized Actor Affects < 1.6.11.2 Patched in 1.6.11.2
27. Patched High · 7.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.27 - Unauthenticated SQL Injection ↗
    2026-04-08 CVE-2026-39493 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.9.27 Patched in 1.6.9.29
28. Patched Medium · 6.5 Simply Schedule Appointments <= 1.6.9.27 - Authenticated (Contributor+) SQL Injection ↗
    2026-03-26 CVE-2026-39495 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.9.27 Patched in 1.6.9.29
29. Patched High · 7.5 Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parameter ↗
    2026-03-18 CVE-2026-3658 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.10.0 Patched in 1.6.10.2
30. Patched High · 7.5 Appointment Booking Calendar <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint ↗
    2026-03-12 CVE-2026-3045 Missing Authorization Affects <= 1.6.9.29 Patched in 1.6.10.0
31. Patched Medium · 4.3 Appointment Booking Calendar <= 1.6.9.29 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure ↗
    2026-03-12 CVE-2026-1704 Authorization Bypass Through User-Controlled Key Affects <= 1.6.9.29 Patched in 1.6.10.0
32. Patched High · 7.5 Appointment Booking Calendar <= 1.6.9.27 - Unauthenticated SQL Injection via 'append_where_sql' Parameter ↗
    2026-03-10 CVE-2026-1708 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.9.27 Patched in 1.6.9.29
33. Patched Medium · 5.3 Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization ↗
    2026-02-26 CVE-2026-39694 Missing Authorization Affects <= 1.6.11.0 Patched in 1.6.11.1
34. Patched Medium · 5.3 Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization ↗
    2026-01-20 CVE-2025-69315 Missing Authorization Affects <= 1.6.9.15 Patched in 1.6.9.17
35. Patched High · 7.5 Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters ↗
    2026-01-14 CVE-2025-12166 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.9.9 Patched in 1.6.9.13
36. Patched Medium · 6.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure ↗
    2026-01-05 CVE-2025-11723 Use of Insufficiently Random Values Affects <= 1.6.9.5 Patched in 1.6.9.6
37. Patched Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure ↗
    2025-12-18 CVE-2025-13754 Missing Authorization Affects <= 1.6.9.16 Patched in 1.6.9.17
38. Patched Medium · 6.4 Simply Schedule Appointments <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes ↗
    2025-06-13 CVE-2025-4667 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.8.30 Patched in 1.6.8.32
39. Patched High · 7.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution ↗
    2025-03-12 CVE-2025-1119 Improper Control of Generation of Code Affects <= 1.6.8.5 Patched in 1.6.8.7
40. Patched Medium · 6.1 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting ↗
    2025-03-06 CVE-2024-13431 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.8.3 Patched in 1.6.8.5
41. Patched Medium · 4.4 Appointment Booking Calendar <= - Authenticated (Admin+) Stored Cross-Site Scripting via Notification Settings ↗
    2024-10-15 CVE-2024-7877 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.7.53 Patched in 1.6.7.55
42. Patched Medium · 4.4 Appointment Booking Calendar <= 1.6.7.53 - Authenticated (Admin+) Stored Cross-Site Scripting via Appointment Settings ↗
    2024-10-15 CVE-2024-7876 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.7.53 Patched in 1.6.7.55
43. Patched High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution ↗
    2024-08-23 CVE-2024-7129 Improper Neutralization of Special Elements used in an OS Command Affects <= 1.6.7.42 Patched in 1.6.7.43
44. Patched Medium · 6.4 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-15 CVE-2024-4288 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.7.14 Patched in 1.6.7.18
45. Patched Medium · 6.1 Simply Schedule Appointments <= 1.6.6.20 - Reflected Cross-Site Scripting ↗
    2024-03-26 CVE-2024-22311 Improper Neutralization of Input During Web Page Generation Affects <= 1.6.6.20 Patched in 1.6.6.24
46. Patched High · 8.8 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode ↗
    2024-03-20 CVE-2024-2342 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.7.7 Patched in 1.6.7.9
47. Patched High · 8.8 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection ↗
    2024-03-20 CVE-2024-2341 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.6.7.7 Patched in 1.6.7.9
48. Patched Medium · 4.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset ↗
    2024-03-05 CVE-2024-1760 Cross-Site Request Forgery Affects <= 1.6.6.20 Patched in 1.6.6.24
49. Patched Medium · 6.6 Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection ↗
    2023-12-21 CVE-2023-50851 Improper Neutralization of Special Elements used in an SQL Command Affects < 1.6.6.1 Patched in 1.6.6.1
50. Patched Medium · 5.5 Simply Schedule Appointments <= 1.5.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-08-08 CVE-2022-2374 Improper Neutralization of Input During Web Page Generation Affects <= 1.5.7.5 Patched in 1.5.7.7
51. Patched Medium · 5.3 Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure ↗
    2022-08-08 CVE-2022-2373 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.7.5 Patched in 1.5.7.7

Translated into 33 languages, 10 at 90% or more

Plus 9 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-17 60K+ → 50K+ down after 203 days in tier
2. 2026-01-26 70K+ → 60K+ down after 98 days in tier
3. 2025-10-20 60K+ → 70K+ up after 192 days in tier
4. 2025-04-11 50K+ → 60K+ up after 123 days in tier
5. 2024-12-09 40K+ → 50K+ up after 151 days in tier
6. 2024-07-11 30K+ → 40K+ up after 163 days in tier
7. 2024-01-30 20K+ → 30K+ up after 469 days in tier
8. 2022-10-18 10K+ → 20K+ up after 550 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Simply Schedule Appointments into a readme, a review or a deck. It updates itself.

Simply Schedule Appointments: 50K+ active installs, 5.0★ (155 reviews). Plugin Pulse (WP Mayor), as of 2026-11-02. https://plugins.wpmayor.com/plugin/simply-schedule-appointments