Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-appointment REST API endpoint in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to modify the status of any appointment.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚡ New CVE Alert: CVE-2026-1932 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1932 #CVE-2026-1932 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/x5VeBZpbTN
Post summary
A new CVE-2026-1932 affecting WordPress is reported with medium risk and severity 5.3; the tweet contains no technical details or exploit information.
CVE-2026-1932 Unauthenticated Appointment Status Modification in WordPress Bookr Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1932
Post summary
The post announces CVE-2026-1932, a vulnerability in the WordPress Bookr plugin that allows unauthenticated appointment status modification; no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-1932 The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update-… https://www.cve.org/CVERecord?id=CVE-2026-1932
Post summary
The Bookr WordPress plugin is disclosed to have a missing capability check that permits unauthorized data modification.