Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-32557 EUVD-2026-93230GHSA-37xg-hr62-p77x

WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2.

Affected products

VendorProductAffectedFixed
BookingWP WooCommerce Appointments ≤ 5.3.2 —

References