Vulnerability in Kivicare

CVE-2026-13610

The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with ful…

Affected products

  • Unknown Kivicare — versions 0

References