Product
The VikAppointments Service Booking Calendar plugin for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to exfiltrate sensitive database content.