https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 04:25:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349709 EUVD-2026-349709 https://cve.radiocsirt.org/vuln/euvd-2026-349709 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14221 <p>The Easy Appointments WordPress plugin through 4.0 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticated user can obtain, allowing users with contributor-level access to read all customers&#39; appointment details and to create, modify, and delete bookings.</p> <p>The Easy Appointments WordPress plugin through 4.0 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticated user can obtain, allowing users with contributor-level access to read all customers&#39; appointment details and to create, modify, and delete bookings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14221 https://cve.radiocsirt.org/vuln/ghsa-qw8r-6q92-c4g3 <p>The Easy Appointments WordPress plugin through 3.12.26 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticated user can obtain, allowing users with contributor-level access to read all customers&#39; appointment details and to create, modify, and delete bookings.</p> <p>The Easy Appointments WordPress plugin through 3.12.26 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticated user can obtain, allowing users with contributor-level access to read all customers&#39; appointment details and to create, modify, and delete bookings.</p> https://cve.radiocsirt.org/vuln/ghsa-qw8r-6q92-c4g3