Beveiligingsadvies

CVE-2026-12113

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-01 04:32:26
Laatst bijgewerkt 2026-07-01 10:42:11
Toegewezen door Wordfence
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.02 via the cpabc_appointments_filter_list. This makes it possible for authenticated attackers, with contributor-level access and above, to extract customer names, email addresses, phone numbers, appointment comments, and other booking personally identifiable information.