https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:53:14.065715+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-13611 fkie_cve-2026-13611 2026-09-29T03:53:14.109704+00:00

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.

 https://db.gcve.eu/vuln/ghsa-7wpp-qcpv-5hf7 GHSA-7wpp-qcpv-5hf7 2026-09-29T03:53:14.109803+00:00

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.