https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:05:43.610966+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2627 CVE-2023-2627 — KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls 2026-10-07T22:05:43.612448+00:00

Affected: Unknown KiviCare

The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, allowing any authenticated users, such as subscriber to call them. Attacks include but are not limited to: Add arbitrary Clinic Admin/Doctors/etc and update plugin's settings