CVE-2026-68566

An unauthenticated SQL injection vulnerability exists in BookingPress Appointment Booking Pro versions up to 6.0.2, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This critical flaw poses a significant risk to any organization using the affected versions, making it imperative for users to prioritize immediate updates or mitigations to safeguard their systems.