CVE-2026-68566: WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability
Published Aug 20, 2026
·Updated
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.
Affected Software
1 affected component
wordpress/bookingpress-appointment-booking-pro<=6.0.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress BookingPress Appointment Booking Pro pluginto a version that resolves this vulnerability.Fixed in 6.0.2
Event History
Aug 20, 2026
CVE Published
via MITRE·12:07 PM
Data Sourced
via MITRE·12:07 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An unauthenticated remote attacker can exploit it; no WordPress account or user interaction is required.
2
Which installations are affected?
BookingPress Appointment Booking Pro versions 6.0.2 and earlier are affected. The provided data does not identify any configuration prerequisite or a fixed version.
3
What is the potential impact?
Successful exploitation can allow high-impact disclosure of confidential data and can affect resources beyond the vulnerable component. The availability impact is rated low, while integrity impact is listed as none.