CVE-2026-12113
|
| |
|
|
Affected software |
WORDPRESS |
|
|
|
The Appointment Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.02 via the cpabc_appointments_filter_list. This makes it possible for authenticated attackers, with contributor-level access and above, to extract customer names, email addresses, phone numbers, appointment comments, and other booking personally identifiable information. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-12113 |
