PT-2026-78303

Name of the Vulnerable Software and Affected Versions KiviCare versions prior to 4.5.4 Description The KiviCare WordPress plugin fails to verify if the requesting user is the owner of the appointment being modified. This allows authenticated users with patient-level privileges to cancel or...