CVE-2026-14211

CVE-2026-14211 affects the Booking for Appointments and Events Calendar WordPress plugin before 9.7. The root cause is missing verification that an authenticated employee (provider) is related to the target customer, enabling any Employee Panel user to read and modify stored personal data of any ...