Security Advisory

CVE-2026-13612

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-12 06:00:12

Last updated 2026-08-13 15:51:42

Assigner WPScan

CVSS score 4.3

State PUBLISHED

Description

The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details.

← Browse all CVEs View on cve.org ↗