Security Advisory

CVE-2026-19416

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 06:00:21

Last updated 2026-08-19 16:35:34

Assigner WPScan

CVSS score 4.3

State PUBLISHED

Description

The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level users to cancel and reschedule other patients' appointments.

← Browse all CVEs View on cve.org ↗