https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T22:38:20.552248+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-14211 CVE-2026-14211 — Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR 2026-10-01T22:38:20.570103+00:00

Affected: Unknown Booking for Appointments and Events Calendar

The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.