{"vulnerability": "cve-2026-32557", "sightings": [{"uuid": "564e8112-92a6-4761-bad0-92612397c3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76pp2lwf22", "content": "\ud83d\udea8 CVE-2026-32557 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32557\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:07:42.871425Z"}, {"uuid": "81415507-d9f9-442c-a7f4-df6e4bb8e3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7b2k2z2k2o", "content": "CVE-2026-32579: Kognetiks Chatbot for WordPress <=2.4.9, unauthenticated file upload. CVE-2026-32568: WooCommerce Designer Pro <=1.9.33, subscriber RCE. CVE-2026-32557: WooCommerce Appointments <=5.3.2, unauthenticated SQL injection. Update each plugin.", "creation_timestamp": "2026-10-06T10:49:34.199773Z"}, {"uuid": "7a25f6d2-f350-448a-ac12-e4e3746c0776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcrfndfzh22", "content": "CVE-2026-32557 - woocommerce appointments\nThe WooCommerce Appointments add\u2011on for WordPress (versions up to 5.3.2) can be accessed by anyone on the internet to run database commands. This could let an attacker view, change,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T20:20:05.703143Z"}]}