Skedmaker Security & Risk Analysis
wordpress.org/plugins/skedmaker-online-schedulingSkedmaker is an online appointment booking system that lets your clients make a reservation with you via the internet, 24/7/365.
Is Skedmaker Safe to Use in 2026?
Generally Safe
Score 85/100Skedmaker has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The skedmaker-online-scheduling plugin v0.98 exhibits a mixed security posture. While the static analysis reports no known CVEs and a limited attack surface with no identified unprotected entry points, significant concerns arise from the code analysis. The most alarming finding is that 100% of outputs are not properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities. Additionally, despite a relatively high percentage of SQL queries using prepared statements, the presence of 33 SQL queries suggests potential for SQL injection if the unescaped outputs or other unaddressed code flows can influence query parameters. The taint analysis, while not flagging critical or high severity issues, reveals that all analyzed flows involve unsanitized paths, which, when combined with unescaped output, could lead to severe vulnerabilities.
Key Concerns
- 100% of output escaping missing
- All taint flows involve unsanitized paths
- 0 nonce checks present
- 0 capability checks present
- SQL queries present without clear sanitization context
Skedmaker Security Vulnerabilities
Skedmaker Release Timeline
Skedmaker Code Analysis
SQL Query Safety
Output Escaping
Data Flow Analysis
Skedmaker Attack Surface
Shortcodes 1
WordPress Hooks 5
Maintenance & Trust
Skedmaker Maintenance & Trust
Maintenance Signals
Community Trust
Skedmaker Alternatives
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
latepoint
Appointment booking plugin for WordPress. Let clients self-schedule 24/7, accept payments at booking, and reduce no-shows, all from your WordPress sit …
Booking for Appointments and Events Calendar – Amelia
ameliabooking
Amelia is a powerful booking plugin for appointments and events. Manage scheduling, calendars, and availability with an all-in-one booking system.
Online Scheduling and Appointment Booking System – Bookly
bookly-responsive-appointment-booking-tool
Appointment booking system for WordPress — schedule appointments, manage calendars, send reminders, take payments. Start booking today!
Simply Schedule Appointments
simply-schedule-appointments
Unlimited appointments, booking calendars, and notifications. Powerful appointment booking plugin and booking system. Start scheduling for free today!
SimplyBook.me – Booking and reservations calendar
simplybook
Simply add a booking calendar to your site to schedule bookings, reservations, appointments and to collect payments.
Skedmaker Developer Profile
2 plugins · 20 total installs
How We Detect Skedmaker
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/skedmaker-online-scheduling/_include/sm-styles.php/wp-content/plugins/skedmaker-online-scheduling/_btns/btn_reminders32_reg.png/wp-content/plugins/skedmaker-online-scheduling/_btns/btn_chair32_reg.png/wp-content/plugins/skedmaker-online-scheduling/_btns/btn_future32_reg.pngHTML / DOM Fingerprints
<!-- Coding and decoding --><!-- Start session if not already started --><!-- shortcode --><!-- dashboard panel -->data-iddata-actiondata-namedata-servicedata-userdata-date+7 moreSM_dSM_eSM_dcontentSM_logoutSM_redBoxSM_redirect+12 more[wp-skedmaker]