https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T08:06:43.275561+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-13612 fkie_cve-2026-13612 2026-10-07T08:06:43.277217+00:00

The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details.

 https://vulnerability.circl.lu/vuln/ghsa-f444-wc3x-6c2g GHSA-f444-wc3x-6c2g 2026-10-07T08:06:43.277319+00:00

The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details.