What’s Vulnerable › Products
Rox Appointment Booking vulnerabilities
5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Rox Appointment Booking version is affected
Latest Rox Appointment Booking vulnerabilities
- CVE-2026-87907 — Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes (CVSS 5.3)
- CVE-2026-87896 — Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route (CVSS 5.3)
- CVE-2026-87894 — Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR (CVSS 5.3)
- CVE-2026-87892 — Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass (CVSS 5.3)
- CVE-2026-87891 — Rox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST API (CVSS 6.5)