https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:29:28 +0000 https://vulnerability.circl.lu/vuln/cve-2026-14224 <p><strong>Affected:</strong> Unknown Easy Appointments</p> <p>The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment&#39;s edit form. A subscriber-level user with an appointment of their own can therefore reuse that nonce to overwrite the customer metadata (email, name, phone, description) of another user&#39;s appointment. Because the Easy Appointments WordPress plugin before 3.12.28 then treats that metadata as the appointment&#39;s contact data, a subsequent administrator status change with customer notifications enabled delivers the victim&#39;s appointment notification to the attacker-controlled email address.</p> <p><strong>Affected:</strong> Unknown Easy Appointments</p> <p>The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment&#39;s edit form. A subscriber-level user with an appointment of their own can therefore reuse that nonce to overwrite the customer metadata (email, name, phone, description) of another user&#39;s appointment. Because the Easy Appointments WordPress plugin before 3.12.28 then treats that metadata as the appointment&#39;s contact data, a subsequent administrator status change with customer notifications enabled delivers the victim&#39;s appointment notification to the attacker-controlled email address.</p> https://vulnerability.circl.lu/vuln/cve-2026-14224