CVE-2026-13395

CVE-2026-13395 affects the WordPress plugin for the Online Scheduling and Appointment Booking System, version prior to 27.8. The root cause is failure to sanitize or properly cast a user-supplied parameter from unauthenticated front-end booking requests before using it in a SQL query, enabling un...