CVE-2026-84768

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

CVE-2026-84768

CVE-2026-84768 affects the WordPress VikAppointments Services Booking Calendar plugin in versions 1.2.20 and earlier . The vulnerability is an unauthenticated SQL Injection , meaning an attacker can exploit it without prior access or credentials. The CVSS 3.1 base score is 9.3 (CRITICAL) , with a...

CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

EUVD-2026-70578

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin VikAppointments Services Booking Calendar versions = 1.2.20...

PT-2026-85108

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

CVE-2026-84768: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...

WordPress VikAppointments Services Booking Calendar plugin <= 1.2.19 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by nthng in WordPress Plugin VikAppointments Services Booking Calendar versions = 1.2.19...

CVE-2026-15918

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

CVE-2026-15918

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

CVE-2026-15918 VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

CVE-2026-15918 VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

CVE-2026-15918

The CVE describes a SQL injection in the VikAppointments WordPress plugin (versions

EUVD-2026-53038

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

CVE-2026-15918: Improper Neutralization of Special Elements used in an SQL Command

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

EUVD-2025-2940

Malicious code in bioql PyPI...

CVE-2025-22719

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...

CVE-2025-22719

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through = 1.2.16...

CVE-2025-22719

CVE-2025-22719 is a Stored XSS in VikAppointments Services Booking Calendar (E4J s.r.l.) across VikAppointments versions up to 1.2.16 (no details beyond that). Public sources (Red Hat, ENISA EUVD, Patchstack) describe it as Improper Neutralization of Input During Web Page Generation (XSS) with CV...