Filtered by vendor Kivicare Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-13611 2 Kivicare, Wordpress 2 Kivicare, Wordpress 2026-09-01 5.3 Medium
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.