CVE-2026-14226

4.3 Moyenne

Publiée le 30/07/2026 à 08:25 · Modifiée le 10/08/2026 à 11:17 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Easy Appointments WordPress plugin before 3.12.28 does not require a sufficient capability on one of its appointment-listing REST endpoints, restricting it only to a capability that every authenticated user holds, allowing users with subscriber-level access to read all bookings on the site, including customer names, schedules, and statuses.

Traduire en français

Produits concernés

Unknown Easy Appointments

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-200

Références

https://wpscan.com/vulnerability/fa201b6f-af45-4ce9-aa3b-3688ae556965/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories