CVE-2026-13610 - KiviCare 4.5.2 - Unauthenticated Privilege Escalation via Registration
Brief
CVE ID : CVE-2026-13610
Published : Aug. 13, 2026, 6:17 a. m.
- 2 hours, 47 minutes ago
Description : The KiviCare WordPress plugin before 4.
- 2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with full access to patient records, billing and clinic data.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...