https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T17:48:07.117340+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-14188 CVE-2026-14188 — Easy Appointments < 3.12.28 - Contributor+ Customer Data Disclosure 2026-10-08T17:48:07.153643+00:00

Affected: Unknown Easy Appointments

The Easy Appointments WordPress plugin before 3.12.28 does not perform a per-request capability or nonce check on one of its customer-listing handlers, allowing authenticated users with contributor-level access to read every stored customer's personal information.