https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:34:09.597213+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13613 CVE-2026-13613 — KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint 2026-10-07T08:34:09.598323+00:00

Affected: Unknown KiviCare

The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection.