| CVE-2026-13611 |
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing…
|
5.3
Moyenne
|
1 sept. 2026 |
| CVE-2026-19416 |
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appointment being…
|
4.3
Moyenne
|
19 août 2026 |
| CVE-2026-19417 |
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being…
|
6.5
Moyenne
|
19 août 2026 |
| CVE-2026-13610 |
The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated…
|
7.5
Élevée
|
13 août 2026 |
| CVE-2026-13612 |
The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed,…
|
4.3
Moyenne
|
12 août 2026 |
| CVE-2026-13613 |
The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before…
|
8.8
Élevée
|
12 août 2026 |
| CVE-2023-2624 |
The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the…
|
Non notée
|
27 juin 2023 |
| CVE-2023-2628 |
The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various…
|
Non notée
|
27 juin 2023 |
| CVE-2023-2623 |
The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user…
|
Non notée
|
27 juin 2023 |
| CVE-2023-2627 |
The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions,…
|
Non notée
|
27 juin 2023 |