Simply Schedule Appointments

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 99% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ sparisi

   3mo ago

   Great plug in for basic appointment setting. Excellent customer service if you have any questions. Responsive to enhancement requests!

   Read on wp.org ↗
2. ★★★★★ Luckydogie

   8mo ago

   I was looking for a plugin to allow our customers to setup an appointment with our technician. I found this plugin and decided to give it a try after reading all the reviews. It was so simple and I was able to make my first appointment setup and running within 30 minutes – and it works without any issues. The amazing part about this plugin is their support. I have a question about the calendar syncs function and I reached out to the support – I got a response from their team within an hour, even though I haven’t upgraded to their pro version yet. I highly recommend this product to anyone who needs a simple appointment plugin for the WordPress website.

   Read on wp.org ↗
3. ★★★★★ lkarchner

   9mo ago

   I had to use the Simply Schedule Appointments plugin yesterday. I didn’t expect much, as there are lots of shoddy plugins out there. I found myself pleasantly surprised to find that it was very well written and super easy to use. No bugs, no issues. I wish everyone coded plugins this thoroughly. Cheers! 🙂

   Read on wp.org ↗
4. ★★★★★ usman738

   10mo ago

   Simply Schedule Appointments plugin was super easy to set up and has all the booking options I needed. The integrations work great, and the support team is always quick to help. Definitely recommend it!

   Read on wp.org ↗
5. ★★★★★ tdhmonte68

   11mo ago

   My client business has already schedule more than 100 plus appointment in a short amount of time. The plugin works great.

   Read on wp.org ↗
6. ★★★★★ arbpen

   1.0y ago

   One thing I love about this plugin is that it takes query strings. We have out own inhouse appointment system and I generate the required information in a query string and pass it to SSA. SSA is also easy to configure although advanced set up may require a little help. Speaking of help, when I miscoded something, SSA’s support team was on it and found my error right away with an easy fix. SSA blows Calendly away. We have also used a HIPPA compliant system and it wasn’t nearly as good as this. If you are looking for an excellent scheduling plugin, this is the one to get.

   Read on wp.org ↗
7. ★★★★★ emafd

   1.1y ago

   Excellent plugin. I’ve been using it for 2 years now and it’s working very well, in sync with Google calendar. What I especially love is their wonderful and friendly client support, always here to help.

   Read on wp.org ↗
8. ★★★★★ rtenny

   1.2y ago

   After I have tried several booking plugins, which are far too complicated for what I needed, I found this little gem. It’s easy to set up as I only need one type of booking with one user. It looks great on the page and is easy to use for the end user. This is the ideal plugin if you want something that works straight out of the box within five minutes.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-11 Version 1.6.12.19 Google Calendar: skip the redundant token-validation call on every availability check 1.6.12.19
2. 2026-08-04 Version 1.6.12.17 Add rate limiting to protect the booking form from spam and bot bookings Fix giant emoji in appointment type titles in the admin app Vulnerability: Team Member role can disclose all users’ emails (up to 1.6.12.16) 1.6.12.17
3. 2026-07-28 Version 1.6.12.15 Detect and fix SSA events wrongly counted as busy (Google Calendar drift) Fix appointment buffer times ignored on PHP 8.2+ (allowing back-to-back bookings) and customer data lost in backups; add PHP 8.4 support Harden th 1.6.12.15
4. 2026-07-21 Version 1.6.12.13 Handle Google Calendar invalid_grant: stop dead-token retries and flag staff needing reconnect 1.6.12.13
5. 2026-07-14 Version 1.6.12.11 Fix stored XSS via appointment meta javascript: URI Fix Basic-edition upgrade-link CSS leaking into plugin-update AJAX responses Harden booking endpoint against spam bookings. Harden appointment meta links to allow only 1.6.12.11
6. 2026-06-30 Version 1.6.12.8 Fix purge appointments 500 on Basic/Plus/Pro editions (missing dependency models) Require a non-zero “First Available within” duration (default 1 hour) 1.6.12.8

40 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure ↗
   2026-08-15 CVE-2026-13358 Authorization Bypass Through User-Controlled Key Affects <= 1.6.12.10 Patched in 1.6.12.11
2. Medium · 5.3 Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference ↗
   2026-08-06 CVE-2026-16540 Authorization Bypass Through User-Controlled Key Affects < 1.6.12.6 Patched in 1.6.12.6
3. High · 7.5 Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection ↗
   2026-07-28 CVE-2026-65508 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.12.10 Patched in 1.6.12.11
4. High · 7.2 Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-28 CVE-2026-65513 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.12.10 Patched in 1.6.12.11
5. Medium · 4.3 Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure ↗
   2026-07-23 CVE-2026-15254 Incorrect Authorization Affects <= 1.6.12.10 Patched in 1.6.12.11
6. Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.4 - Missing Authorization ↗
   2026-07-09 CVE-2026-57812 Missing Authorization Affects <= 1.6.12.4 Patched in 1.6.12.6
7. Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.11 - Missing Authorization ↗
   2026-07-09 CVE-2026-59523 Missing Authorization Affects <= 1.6.11.11 Patched in 1.6.12.0
8. High · 7.2 Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-06 CVE-2026-13400 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.12.3 Patched in 1.6.12.4
9. High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-26 CVE-2026-57317 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.12.2 Patched in 1.6.12.4
10. High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.10.6 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-05-28 CVE-2026-39447 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.10.6 Patched in 1.6.11.0
11. Medium · 5.3 Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint ↗
    2026-05-27 CVE-2026-6937 Missing Authorization Affects <= 1.6.11.8 Patched in 1.6.11.9
12. High · 7.5 Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter ↗
    2026-05-27 CVE-2026-7797 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.11.8 Patched in 1.6.11.9
13. Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.11.5 - Unauthenticated Denial of Service ↗
    2026-05-26 CVE-2026-7493 Uncontrolled Resource Consumption Affects <= 1.6.11.5 Patched in 1.6.11.7
14. Medium · 6.5 Appointment Booking Calendar <= 1.6.10.6 - Unauthenticated Arbitrary Appointment View, Modification and Deletion ↗
    2026-05-06 CVE-2026-4807 Missing Authorization Affects <= 1.6.10.6 Patched in 1.6.11
15. Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin < 1.6.11.2 - Unauthenticated Sensitive Information Exposure ↗
    2026-04-27 CVE-2026-42384 Exposure of Sensitive Information to an Unauthorized Actor Affects < 1.6.11.2 Patched in 1.6.11.2
16. High · 7.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.27 - Unauthenticated SQL Injection ↗
    2026-04-08 CVE-2026-39493 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.9.27 Patched in 1.6.9.29
17. Medium · 6.5 Simply Schedule Appointments <= 1.6.9.27 - Authenticated (Contributor+) SQL Injection ↗
    2026-03-26 CVE-2026-39495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.9.27 Patched in 1.6.9.29
18. High · 7.5 Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parameter ↗
    2026-03-18 CVE-2026-3658 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.10.0 Patched in 1.6.10.2
19. High · 7.5 Appointment Booking Calendar <= 1.6.9.29 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Settings REST API Endpoint ↗
    2026-03-12 CVE-2026-3045 Missing Authorization Affects <= 1.6.9.29 Patched in 1.6.10.0
20. Medium · 4.3 Appointment Booking Calendar <= 1.6.9.29 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure ↗
    2026-03-12 CVE-2026-1704 Authorization Bypass Through User-Controlled Key Affects <= 1.6.9.29 Patched in 1.6.10.0
21. High · 7.5 Appointment Booking Calendar <= 1.6.9.27 - Unauthenticated SQL Injection via 'append_where_sql' Parameter ↗
    2026-03-10 CVE-2026-1708 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.9.27 Patched in 1.6.9.29
22. Medium · 5.3 Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization ↗
    2026-02-26 CVE-2026-39694 Missing Authorization Affects <= 1.6.11.0 Patched in 1.6.11.1
23. Medium · 5.3 Simply Schedule Appointments <= 1.6.9.15 - Missing Authorization ↗
    2026-01-20 CVE-2025-69315 Missing Authorization Affects <= 1.6.9.15 Patched in 1.6.9.17
24. High · 7.5 Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters ↗
    2026-01-14 CVE-2025-12166 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.9.9 Patched in 1.6.9.13
25. Medium · 6.5 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure ↗
    2026-01-05 CVE-2025-11723 Use of Insufficiently Random Values Affects <= 1.6.9.5 Patched in 1.6.9.6
26. Medium · 5.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.16 - Missing Authorization to Unauthenticated Sensitive Information Exposure ↗
    2025-12-18 CVE-2025-13754 Missing Authorization Affects <= 1.6.9.16 Patched in 1.6.9.17
27. Medium · 6.4 Simply Schedule Appointments <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes ↗
    2025-06-13 CVE-2025-4667 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.8.30 Patched in 1.6.8.32
28. High · 7.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution ↗
    2025-03-12 CVE-2025-1119 Improper Control of Generation of Code ('Code Injection') Affects <= 1.6.8.5 Patched in 1.6.8.7
29. Medium · 6.1 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3 - Reflected Cross-Site Scripting ↗
    2025-03-06 CVE-2024-13431 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.8.3 Patched in 1.6.8.5
30. Medium · 4.4 Appointment Booking Calendar <= - Authenticated (Admin+) Stored Cross-Site Scripting via Notification Settings ↗
    2024-10-15 CVE-2024-7877 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.7.53 Patched in 1.6.7.55
31. Medium · 4.4 Appointment Booking Calendar <= 1.6.7.53 - Authenticated (Admin+) Stored Cross-Site Scripting via Appointment Settings ↗
    2024-10-15 CVE-2024-7876 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.7.53 Patched in 1.6.7.55
32. High · 7.2 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.42 - Authenticated (Admin+) Remote Code Execution ↗
    2024-08-23 CVE-2024-7129 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affects <= 1.6.7.42 Patched in 1.6.7.43
33. Medium · 6.4 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-15 CVE-2024-4288 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.7.14 Patched in 1.6.7.18
34. Medium · 6.1 Simply Schedule Appointments <= 1.6.6.20 - Reflected Cross-Site Scripting ↗
    2024-03-26 CVE-2024-22311 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.6.20 Patched in 1.6.6.24
35. High · 8.8 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Contributor+) SQL Injection via Shortcode ↗
    2024-03-20 CVE-2024-2342 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.7.7 Patched in 1.6.7.9
36. High · 8.8 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.7.7 - Authenticated (Subscriber+) SQL Injection ↗
    2024-03-20 CVE-2024-2341 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.7.7 Patched in 1.6.7.9
37. Medium · 4.3 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset ↗
    2024-03-05 CVE-2024-1760 Cross-Site Request Forgery (CSRF) Affects <= 1.6.6.20 Patched in 1.6.6.24
38. Medium · 6.6 Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection ↗
    2023-12-21 CVE-2023-50851 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.6.6.1 Patched in 1.6.6.1
39. Medium · 5.5 Simply Schedule Appointments <= 1.5.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-08-08 CVE-2022-2374 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.7.5 Patched in 1.5.7.7
40. Medium · 5.3 Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure ↗
    2022-08-08 CVE-2022-2373 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.5.7.5 Patched in 1.5.7.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 31 languages, 9 at 90% or more

Plus 7 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-17 60K+ → 50K+ down after 203 days in tier
2. 2026-01-26 70K+ → 60K+ down after 98 days in tier
3. 2025-10-20 60K+ → 70K+ up after 192 days in tier
4. 2025-04-11 50K+ → 60K+ up after 123 days in tier
5. 2024-12-09 40K+ → 50K+ up after 151 days in tier
6. 2024-07-11 30K+ → 40K+ up after 163 days in tier
7. 2024-01-30 20K+ → 30K+ up after 469 days in tier
8. 2022-10-18 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress 100K+ installs · 4.8★ · 5 shared tags A
• Advanced Appointment Booking & Scheduling 3K+ installs · 3.6★ · 5 shared tags B
• Bookify – Appointment Booking & Scheduling for WordPress 10+ installs · 3.6★ · 5 shared tags B
• Online Scheduling and Appointment Booking System – Bookly 60K+ installs · 4.4★ · 4 shared tags A
• Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution 20K+ installs · 4.5★ · 4 shared tags A
• WPS Bookings for WooCommerce 3K+ installs · 4.3★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Simply Schedule Appointments into a readme, a review or a deck. It updates itself.

Simply Schedule Appointments: 50K+ active installs, 5.0★ (155 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/simply-schedule-appointments