CVE-2026-68566 Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions

Description

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
BookingPress Appointment Booking Pro 6.0	earliest → 6.0.2	No fix stated

Other CVEs of BookingPress Appointment Booking Pro

The 3 CVEs of BookingPress Appointment Booking Pro →

CVE-2026-11823 The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the… 7.5 High CVE-2026-6960 The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in… 9.8 Critical