CVE-2026-14188

Name of the Vulnerable Software and Affected Versions Easy Appointments WordPress plugin versions prior to 3.12.28

Description An issue exists where a customer-listing handler fails to perform a per-request capability or nonce check. A nonce is a unique token used to prevent replay attacks by ensuring that a request is intentional and authentic. This allows authenticated users with contributor-level access to read the personal information of all stored customers.

Recommendations Update the plugin to version 3.12.28 or later.