MEDIUM 4.3 NVD

CVE-2026-14223

The Easy Appointments WordPress plugin through 3.12.26 does not verify ownership or capability when returning stored customer details, allowing users with subsc

The Easy Appointments WordPress plugin through 3.12.26 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an identifier.

References

https://wpscan.com/vulnerability/28b71d3e-5034-42d9-8044-68c90731d38f/

Published: 2026-07-30 · Source: NVD · Feed updated: 2026-08-04

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-07-30 via NVD.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.