SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-32557

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Summary

The vulnerability allows an unauthenticated attacker to perform SQL injection in WooCommerce Appointments up to version 5.3.2.

Risk Assessment

An attacker can execute unauthorized database queries, potentially leading to data leakage or database corruption.

Recommendation

Update the WooCommerce Appointments plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in WooCommerce Appointments

Original NVD description (English source)

Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS