CVE-2026-32557

The WooCommerce Appointments plugin versions up to 5.3.2 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries on the database. This critical vulnerability could lead to unauthorized data access or manipulation, posing significant risks to the integrity and confidentiality of sensitive information. E-commerce businesses utilizing this plugin should prioritize immediate patching to mitigate potential exploitation.