Wordfence
DATABASE
FILE — 011VULNERABILITY DATABASE
WP-RESCUE // Threat intelligence · 脆弱性データベース
脆弱性データベース
日々
Photo: Rob Wingate / Unsplash
WATRIXは外部からの無料診断に加え、個別の影響調査、侵害されたサイトの復旧・再発防止のご相談を承ります。
LOADING DATABASE
脆弱性情報を読み込んでいます
DATABASE
日々
Photo: Rob Wingate / Unsplash
WATRIXは外部からの無料診断に加え、個別の影響調査、侵害されたサイトの復旧・再発防止のご相談を承ります。
LOADING DATABASE
脆弱性情報を読み込んでいます
ADVISORY
影響範囲、修正情報、出典と履歴を確認できます。
Photo: Rob Wingate / Unsplash
LOADING DATABASE
影響範囲と修正情報を読み込んでいます
ADVISORY
影響範囲、修正情報、出典と履歴を確認できます。
Photo: Rob Wingate / Unsplash
LOADING DATABASE
影響範囲と修正情報を読み込んでいます
ADVISORY
掲載中修正版ありSimply Schedule Appointments
Photo: Rob Wingate / Unsplash
© 2026 WATRIX合同会社. All rights reserved.
CVE-2026-4807
情報整理：WATRIX合同会社。影響の確定や侵害の有無は、実際の版・設定・ログ等を確認して判断します。
公開元の記載です。日本語での確認手順・対処の解説が付いていない項目も含まれます。
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6. This is due to a flawed authorization logic in the nonce_permissions_check() method combined with the public exposure of a site-wide reusable nonce. The plugin exposes a public_nonce value through the /wp-json/ssa/v1/embed-inner endpoint, which is accessible to unauthenticated users. The appointment deletion endpoint at /wp-json/ssa/v1/appointments/{id}/delete and /wp-json/ssa/v1/appointments/bulk use a permission check that accepts requests containing both an X-WP-Nonce header (with any arbitrary value) and an X-PUBLIC-Nonce header (with the valid public nonce). When the X-WP-Nonce validation fails, the function falls back to validating the X-PUBLIC-Nonce without properly rejecting the request. Since the public_nonce is exposed to all unauthenticated visitors and is site-wide (not user-specific or appointment-specific), attackers can obtain it and use it to view details of arbitrary appointments, including the public_edit_url, or delete arbitrary appointments by ID. This makes it possible for unauthenticated attackers to view, delete or modify any appointment in the system, disclosing sensitive appointment data, causing service disruption, and loss of booking records.
This record contains material that is subject to copyright
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
attribution-required
なし
当サイトが取得した原本の履歴です。公開元での過去の改訂日時とは異なります。
初回保存のみです。訂正前の版はまだありません。
現在の保存内容2026/10/31 18:02
Wordfenceの改訂履歴は、当サイトでの保存開始以降が対象です。初回取得より前の版は含まれません。
このページは公表情報を確認するためのデータです。製品を使っているだけで被害や脆弱性への該当が確定するものではありません。現在のバージョン、設定条件、開発元の更新情報を確認してください。