Cpe:2.3:a:rox:appointment_booking:*:*:*:*:*:wordpress:*:*

The Rox Appointment Booking plugin for WordPress is vulnerable to unauthenticated mass assignment, allowing attackers to overwrite administrator email addresses and facilitate account takeover.