Description
Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Iqonic Design | KiviCare | ≤ 4.2.1 | — |
Medium · 6.3
CVE-2026-40792
EUVD-2026-36995GHSA-22ch-h6m8-g2vp
WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability
Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack