CVE-2026-13610

The CVE describes a vulnerability in the KiviCare WordPress plugin prior to version 4.5.2 . The root cause is that the plugin’s unauthenticated registration endpoint does not restrict the roles assignable to new accounts, allowing an unauthenticated attacker to create an active, privileged clinic...