CVE-2026-66462

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments plugin versions up to 5.3.8. An attacker without authentication can access confidential information.

Risk Assessment

Leakage of sensitive data, such as appointment data or customer data, which may compromise privacy and customer trust.

Recommendation

Update the WooCommerce Appointments plugin to the latest version that fixes the data exposure issue.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.