Beveiligingsadvies

CVE-2026-14188

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-30 06:00:05

Laatst bijgewerkt 2026-08-10 12:42:33

Toegewezen door WPScan

CVSS-score 2.7

Status PUBLISHED

Beschrijving

The Easy Appointments WordPress plugin before 3.12.28 does not perform a per-request capability or nonce check on one of its customer-listing handlers, allowing authenticated users with contributor-level access to read every stored customer's personal information.

← Alle CVE's bekijken Bekijk op cve.org ↗