High · 7.5 CVE-2026-66462 EUVD-2026-57881GHSA-vqm4-m887-hg85

WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack

Vendor: BookingWP Product: WooCommerce Appointments Category: Web / CMS

Description

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.

Affected products

Vendor	Product	Affected	Fixed
BookingWP	WooCommerce Appointments	≤ 5.3.8	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-appointments/vulnerability/wordpress-woocommerce-appointments-plugin-5-3-8-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry