CVE-2026-73365

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

CVE-2026-73365

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

CVE-2026-73365 WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

EUVD-2026-60787

Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...

CVE-2026-73365

The JetAppointment WordPress plugin (versions 2.5.2 and earlier) contains an unauthenticated SQL injection, exploitable over the network with no credentials, allowing attackers to read sensitive database data; CVSS 9.3 critical. Patchstack's advisory link is provided for details. Exploitation det...