UNKNOWN NVD

CVE-2026-14213

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the app

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the appointment being accessed, allowing any employee to read any appointment by its identifier and disclose the booked customer's personal data.

References

https://wpscan.com/vulnerability/30015f96-2771-493e-96d7-9067996e1531/

Published: 2026-08-13 · Source: NVD · Feed updated: 2026-08-13

This unknown severity vulnerability was published on 2026-08-13 via NVD.

vulnfeed aggregates 10489 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.