Bookingpress-appointment-booking-pro vulnerabilities
We track 1 vulnerability in Bookingpress-appointment-booking-pro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 27, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Bookingpress-appointment-booking-pro vulnerabilities
- 8.2 High severity
bookingpress-appointment-booking-pro: Improper Authentication
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read cust