CVE-2026-14226

CVE-2026-14226 concerns the Easy Appointments WordPress plugin (up to version 3.12.26). The issue is an insufficient capability check on one of the plugin’s appointment-listing REST endpoints, which currently restricts access to a capability that every authenticated user has. As a result, users w...