CVE-2026-66679

The vulnerability exists in Appointment Hour Booking versions up to 1.5.91, where unauthenticated users can exploit broken access control mechanisms to gain unauthorized access to sensitive functionalities. This could lead to unauthorized appointment management or data exposure. Organizations using this plugin should prioritize remediation to protect against potential misuse and data breaches.