Skip to content
OpenAdvisories

Vendor

BookingWP

2 known vulnerabilities.

Products

WooCommerce Appointments 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-32557

    WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2.

    BookingWP WooCommerce Appointments Web / CMS