BookingWP

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

BookingWP records in CISA KEV

No BookingWP vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-67916 CVE-2026-32557 · GHSA-37xg-hr62-p77x

SQL injection in BookingWP WooCommerce Appointments plugin

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-06 No fix listed CWE-89

TI-2026-47216 CVE-2026-66462 · GHSA-vqm4-m887-hg85

WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

LOW 39

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-08-13 No fix listed CWE-497

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0