Unknown Rox Appointment Booking

5 known vulnerabilities in Unknown Rox Appointment Booking, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-87907 CVSS 5.3 medium The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking…
  • CVE-2026-87896 CVSS 5.3 medium The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking…
  • CVE-2026-87894 CVSS 5.3 medium The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a…
  • CVE-2026-87892 CVSS 5.3 medium The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own…
  • CVE-2026-87891 CVSS 6.5 medium The Rox Appointment Booking WordPress plugin before 1.2.0 does not perform any capability or authorization check when saving its holiday…