https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:32:29.985225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288796 EUVD-2026-288796 2026-10-12T23:32:30.035299+00:00 EUVD-2026-288796 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2992 fkie_cve-2026-2992 2026-10-12T23:32:30.035336+00:00

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the `/wp-json/kivicare/v1/setup-wizard/clinic` REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated attackers to create a new clinic and a WordPress user with clinic admin privileges.

 https://cve.radiocsirt.org/vuln/ghsa-5xj7-5x73-qfqm GHSA-5xj7-5x73-qfqm 2026-10-12T23:32:30.035380+00:00

The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the `/wp-json/kivicare/v1/setup-wizard/clinic` REST API endpoint in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated attackers to create a new clinic and a WordPress user with clinic admin privileges.