CVE-2026-84768 Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions

Description

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

Affected products and versions

Product	Affected versions	Fixed in
VikAppointments Services Booking Calendar 1.2	earliest → 1.2.20	No fix stated

Other CVEs of VikAppointments Services Booking Calendar

The 4 CVEs of VikAppointments Services Booking Calendar →

CVE-2026-87115 The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to… 9.1 Critical CVE-2026-15918 VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of… 7.5 High CVE-2025-22719 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp… 7.1 High