CVE Catalog
CVE-2026-73365
CriticalCVSS 9.3Summary
Unauthenticated SQL Injection vulnerability in JetAppointment plugin versions up to 2.5.2. An attacker without authentication can inject SQL queries.
Risk Assessment
Potential unauthorized access to the database, data leakage or modification.
Recommendation
Update the JetAppointment plugin to a version newer than 2.5.2.
Original NVD description (English source)
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.