Boxnow vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Boxnow products: 1 record(s), with severity, exploitation and fixes.

BOX NOW Delivery 1

Exploited only (KEV) →

CVE-2026-24571 Medium · 4.3 CWE-862 Jan 23, 2026

WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in boxnow BOX NOW Delivery box-now-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BOX NOW Delivery: from n/a through <= 3.0.2.