CVE-2026-2262 | easyappointments Easy Appointments Plugin up to 3.12.21 on WordPress REST API Endpoint ea_appointments information disclosure

April 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in easyappointments Easy Appointments Plugin up to 3.12.21 on WordPress. Affected by this issue is some unknown functionality of the file /wp-json/wp/v2/eablocks/ea_appointments/ of the component REST API Endpoint. Executing a manipulation can lead to information disclosure.

This vulnerability is registered as CVE-2026-2262. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More