Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:39:45 +0000 CVE-2026-19406 — Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing https://db.gcve.eu/vuln/cve-2026-19406 <p><strong>Affected:</strong> Unknown Easy Appointments</p> <p>The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.</p> <p><strong>Affected:</strong> Unknown Easy Appointments</p> <p>The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listing REST endpoints to the records belonging to the requesting user, allowing users with contributor-level access to read all bookings on the site, including customer names, schedules, and statuses.</p> https://db.gcve.eu/vuln/cve-2026-19406