Beveiligingsadvies

CVE-2026-13610

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 06:00:12

Laatst bijgewerkt 2026-08-14 19:00:23

Toegewezen door WPScan

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with full access to patient records, billing and clinic data.

← Alle CVE's bekijken Bekijk op cve.org ↗