https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:34:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351318 EUVD-2026-351318 https://cve.radiocsirt.org/vuln/euvd-2026-351318 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14211 <p>The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.</p> <p>The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14211 https://cve.radiocsirt.org/vuln/ghsa-v3p7-x9gp-7j3j <p>The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.</p> <p>The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel login to read and modify the stored personal data of any customer by enumerating sequential identifiers.</p> https://cve.radiocsirt.org/vuln/ghsa-v3p7-x9gp-7j3j