| CVE-2026-13611 |
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing…
|
5.3
Medium
|
Sep 1, 2026 |
| CVE-2026-19416 |
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being…
|
4.3
Medium
|
Aug 19, 2026 |
| CVE-2026-19417 |
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being…
|
6.5
Medium
|
Aug 19, 2026 |
| CVE-2026-13610 |
The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated…
|
7.5
High
|
Aug 13, 2026 |
| CVE-2026-13612 |
The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed,…
|
4.3
Medium
|
Aug 12, 2026 |
| CVE-2026-13613 |
The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before…
|
8.8
High
|
Aug 12, 2026 |
| CVE-2023-2624 |
The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the…
|
Not rated
|
Jun 27, 2023 |
| CVE-2023-2628 |
The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various…
|
Not rated
|
Jun 27, 2023 |
| CVE-2023-2623 |
The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user…
|
Not rated
|
Jun 27, 2023 |
| CVE-2023-2627 |
The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions,…
|
Not rated
|
Jun 27, 2023 |