rox_appointment_booking_event_calendar_appointment_scheduling vulnerabilities

CVEs whose affected-version data names the rox_appointment_booking_event_calendar_appointment_scheduling package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104012High· 8.8

1w ago

Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint

The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Escalation via Mass Assignment in all versions up to, and including, 1.3.1 This is due to the public `/rox-appointment-…

▾ Twilightroxnor · Rox Appointment Booking – Event, Calendar & Appointment SchedulingEPSS 0.28%via CVEORG