CVE-2026-32557

Bot Verification bookingwp.com: Verifying that you are not a robot... WooCommerce Appointments

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

9.3 Critical · CVSS 3.1, patchstack.com

Description

Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.

References

patchstack.com/database/wordpress/plugin/woocommerce-appointments/vulnerability/wordpress-woocommerce-appointments-plugin-5-3-2-sql-injection-vulnerability?_s_id=cve