boxnow

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

boxnow records in CISA KEV

No boxnow vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-19811 CVE-2026-24571 · GHSA-2mm7-c9cw-wf2r

WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in boxnow BOX NOW Delivery box-now-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BOX NOW Delivery: from n/a through <= 3.0.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-23 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0