CVE-2026-14221

Affected product: Easy Appointments WordPress plugin (≤ 3.12.26). Vulnerability: Missing authorization checks in several appointment-management actions; relies on a nonce that is obtainable by any authenticated user. Root cause: Lack of capability checks allows bypassing access controls. Impact: ...