CVE-2026-3045 | croixhaug Appointment Booking Calendar Plugin up to 1.6.9.29 on WordPress REST Endpoint embed-inner get_item authorization

A vulnerability identified as problematic has been detected in croixhaug Appointment Booking Calendar Plugin up to 1.6.9.29 on WordPress. This impacts the function get_item of the file /wp-json/ssa/v1/embed-inner of the component REST Endpoint. This manipulation causes missing authorization.

This vulnerability is handled as CVE-2026-3045. The attack can be initiated remotely. There is not any exploit available.