CVE-2026-14224— WordPress Easy Appointments 授权问题漏洞

Easy Appointments <= 3.12.26 - Subscriber+ Cross-User Appointment Data Modification via IDOR

The Easy Appointments WordPress plugin through 3.12.26 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A subscriber-level user with an appointment of their own can therefore reuse that nonce to overwrite the customer metadata (email, name, phone, description) of another user's appointment. Because the Easy Appointments WordPress plugin through 3.12.26 then treats that metadata as the appointment's contact data, a subsequent administrator status change with customer notifications enabled delivers the victim's appointment notification to the attacker-controlled email address.

N/A

N/A

WordPress Easy Appointments 授权问题漏洞

WordPress Easy Appointments是WordPress基金会的一款CMS插件组件。 WordPress Easy Appointments 3.12.26及之前版本存在授权问题漏洞，该漏洞源于未验证预约操作的用户归属，仅依赖共享nonce，导致已认证用户可覆盖其他用户的客户元数据，并将管理员通知发送至攻击者控制的邮箱。

N/A

N/A