Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 08:51:04 +0000 CVE-2023-2628 — KiviCare Management System < 3.2.1 - Multiple CSRF https://cve.radiocsirt.org/vuln/cve-2023-2628 <p><strong>Affected:</strong> Unknown KiviCare</p> <p>The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update various users (patients, doctors etc)</p> <p><strong>Affected:</strong> Unknown KiviCare</p> <p>The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. This includes, but is not limited to: Delete arbitrary appointments/medical records/etc, create/update various users (patients, doctors etc)</p> https://cve.radiocsirt.org/vuln/cve-2023-2628