Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:28:29 +0000 CVE-2026-19416 — KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR https://vulnerability.circl.lu/vuln/cve-2026-19416 <p><strong>Affected:</strong> Unknown KiviCare</p> <p>The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level users to cancel and reschedule other patients&#39; appointments.</p> <p><strong>Affected:</strong> Unknown KiviCare</p> <p>The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being modified, allowing authenticated patient-level users to cancel and reschedule other patients&#39; appointments.</p> https://vulnerability.circl.lu/vuln/cve-2026-19416