CVE-2026-66462 HIGH

CVE-2026-66462: WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

Vendor Bookingwp
Product WooCommerce Appointments
Weakness CWE-497
Published August 13, 2026
Last update August 13, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.

Explanation of Vulnerability in Simple Terms

02Summary

WooCommerce Appointments versions up to 5.3.8 expose sensitive system information to unauthenticated attackers over the network. An attacker can retrieve details about the site's configuration and internal structure without needing to log in or interact with a user. This information disclosure could aid further attacks against the site.

What an attacker can do

03Attacker Capabilities

Read sensitive system information about the site's configuration and internal structure.

Potential impact on your site

04Site Impact

Attackers can gather reconnaissance data about your site's setup, potentially enabling follow-up attacks.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

August 13, 2026 CVE published

Related vulnerabilities

08Related CVE

CVE-2026-65474 WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability CVE-2026-49068 WordPress Coupon Affiliates plugin <= 7.8.1 - Sensitive Data Exposure vulnerability CVE-2026-25023 WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability CVE-2026-25344 WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability CVE-2026-65535 WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability