CVE Catalog
CVE-2026-73365
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.40%
33th percentile - higher than 33% of all known CVEs
Summary
Unauthenticated SQL Injection vulnerability in JetAppointment plugin versions up to 2.5.2. An attacker without authentication can inject SQL queries.
Risk Assessment
Potential unauthorized access to the database, data leakage or modification.
Recommendation
Update the JetAppointment plugin to a version newer than 2.5.2.
Other vulnerabilities in JetAppointment
Original NVD description (English source)
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS