What is CVE-2026-14213?
The Booking for Appointments and Events Calendar WordPress plugin vulnerability (CVE-2026-14213) allows any authenticated employee to read any appointment details and access customer personal data via its identifier, due to missing assignment verification. Versions before 2.4.6 are affected, and updating to the latest version is recommended.
Azərbaycanca: Booking for Appointments and Events Calendar WordPress plaginindəki zəiflik (CVE-2026-14213) autentifikasiya olunmuş hər hansı bir işçiyə başqa görüşlərin identifikatoru vasitəsilə müştəri məlumatlarını oxumağa imkan verir. Bu, 2.4.6-dan əvvəlki versiyalara təsir edir. Plaginin ən son versiyasına yenilənməsi tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-862
FAQ2
How does the CVE-2026-14213 vulnerability affect users of the Booking for Appointments and Events Calendar plugin?
This vulnerability allows any authenticated employee to read customer personal data by accessing appointment details via its identifier, due to missing assignment verification in the plugin.
What measure should be taken to protect against CVE-2026-14213?
Since the vulnerability affects versions before 2.4.6, updating the plugin to the latest version is recommended.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.