Critical · 9.3 CVE-2026-73365 EUVD-2026-60787GHSA-j77h-22x9-xwgc

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: Crocoblock. Jetimpex Product: JetAppointment

Description

Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.

Affected products

Vendor	Product	Affected	Fixed
Crocoblock. Jetimpex	JetAppointment	≤ 2.5.2	—

References

https://patchstack.com/database/wordpress/plugin/jet-appointments-booking/vulnerability/wordpress-jetappointment-plugin-2-5-2-sql-injection-vulnerability?_s_id=cve vdb-entry