Security Advisory

CVE-2026-14223

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 06:00:05

Last updated 2026-08-10 12:36:45

Assigner WPScan

CVSS score 4.3

State PUBLISHED

Description

The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an identifier.

← Browse all CVEs View on cve.org ↗