https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:45:11.412746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351730 EUVD-2026-351730 2026-10-09T17:45:11.479595+00:00 EUVD-2026-351730 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13613 fkie_cve-2026-13613 2026-10-09T17:45:11.479638+00:00

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection.

 https://cve.radiocsirt.org/vuln/ghsa-6rg5-hf6w-rc4q GHSA-6rg5-hf6w-rc4q 2026-10-09T17:45:11.479672+00:00

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection.