medium4.3
CVE-2026-14223
The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subsc…
Impact
The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an identifier.
Affected products
| Product | Affected versions |
|---|---|
| Easy Appointments WordPress Plugin | before 3.12.28 |
Versions were read from the advisory text. No structured product data has been published for this record yet.