Beveiligingsadvies

CVE-2026-13611

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-01 07:39:45

Laatst bijgewerkt 2026-09-01 12:19:57

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.

← Alle CVE's bekijken Bekijk op cve.org ↗