Skip to content
OpenAdvisories

Vendor

bssoftware

1 known vulnerabilities.

Products

Appointment Booking Calendar Plugin – Bookr 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-1932

    Appointment Booking Calendar Plugin <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Appointment Status Modification

    The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it po…

    bssoftware Appointment Booking Calendar Plugin – Bookr Web / CMS