CVE-2026-14188
Vulnerability Description
The Easy Appointments WordPress plugin through 3.12.26 does not perform a per-request capability or nonce check on one of its customer-listing handlers, allowing authenticated users with contributor-level access to read every stored customer's personal information.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
Easy Appointments
Discussion (0)
Add Comment
No comments yet. Be the first!