CVE-2026-87965

CVE-2026-87965 affects the Easy Appointments WordPress plugin in versions before 4.0.2.2 . The vulnerability stems from a forgeable email-link token used to authorize appointment cancellation and confirmation actions. The token is derived from a hardcoded salt and the appointment's creation times...