Beveiligingsadvies

CVE-2026-14213

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 06:00:13

Laatst bijgewerkt 2026-08-13 13:53:47

Toegewezen door WPScan

CVSS-score 3.7

Status PUBLISHED

Beschrijving

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the appointment being accessed, allowing any employee to read any appointment by its identifier and disclose the booked customer's personal data.

← Alle CVE's bekijken Bekijk op cve.org ↗