CVE-2026-14222

UNKNOWN 0.0

Easy Appointments <= 3.12.26 - Contributor+ Connection Deletion via Missing Authorization

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Easy Appointments WordPress plugin through 3.12.26 does not perform any capability or nonce check in one of its connection-deletion actions, allowing users with contributor-level access to delete the booking configuration and disable the booking system.

Vendor	unknown
Product	easy appointments
Published	Jul 30, 2026

Stay Ahead of the Next One

Get instant alerts for unknown easy appointments

Be the first to know when new unknown vulnerabilities affecting unknown easy appointments are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Easy Appointments

0 ≤ 3.12.26

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/5b481b5f-c994-46b9-9315-008aae77f785/

Credits

WEI HSIANG WANG WPScan