Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-1932 2 Bssoftware, Wordpress 2 Appointment Booking Calendar Plugin – Bookr, Wordpress 2026-02-16 5.3 Medium
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to modify the status of any appointment.