CVE-2026-73365

CriticalCVSS 9.3

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

32th percentile - higher than 32% of all known CVEs

Unauthenticated SQL Injection vulnerability in JetAppointment plugin versions up to 2.5.2. An attacker without authentication can inject SQL queries.

Potential unauthorized access to the database, data leakage or modification.

Update the JetAppointment plugin to a version newer than 2.5.2.

Original NVD description (English source)

Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.