CVE-2026-68566

CriticalCVSS 9.3

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection vulnerability in the BookingPress Appointment Booking Pro plugin. Affects versions up to 6.0.2.

An unauthenticated attacker can inject SQL queries, potentially leading to data leakage, database modification, or admin account takeover.

Immediately update the BookingPress Appointment Booking Pro plugin to a version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.