https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:30:28 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-77705 <p>The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia&#39;s customer or employee management permissions to set the password and email address of other users&#39; WordPress accounts and take them over.</p> <p>The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia&#39;s customer or employee management permissions to set the password and email address of other users&#39; WordPress accounts and take them over.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-77705 https://vulnerability.circl.lu/vuln/ghsa-67xq-jjpf-484h <p>The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia&#39;s customer or employee management permissions to set the password and email address of other users&#39; WordPress accounts and take them over.</p> <p>The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia&#39;s customer or employee management permissions to set the password and email address of other users&#39; WordPress accounts and take them over.</p> https://vulnerability.circl.lu/vuln/ghsa-67xq-jjpf-484h