Rox Appointment Booking – Appointment Booking Scheduling Solution (<= 1.3.1)

The Rox Appointment Booking plugin for WordPress is vulnerable to unauthenticated mass assignment, allowing attackers to overwrite administrator email addresses and facilitate account takeover.