{"id":"CVE-2026-105257","kind":"vulnerability","aliases":["CVE-2026-105257"],"related":[],"title":"Appointment Booking WordPress plugin: agents can read every customer's record","description":"The Appointment Booking Plugin  WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is assigned to a customer before returning or searching that customer's record, allowing any agent to read and enumerate the personal information of every customer on the site, including those managed by other agents.","summary":"The Appointment Booking Plugin for WordPress, before version 5.7.5, does not check whether an authenticated agent is assigned to a customer before returning that customer's record. Any logged-in agent can read and enumerate personal data for all customers on the site, including those managed by other agents.","severity":"low","cvss":2.7,"epss":0.00227,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["appointment-booking-plugin","package","self-hosted","wordpress"],"not_affected_if":["no-agent-role-users","plugin-version-5.7.5-or-later"],"how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins; affected if below `5.7.5`.\n- Review the plugin's customer lookup and search endpoints for an assignment check before returning records (unknown if sources give file names).","fix":"- Update the Appointment Booking Plugin to `5.7.5` or later.\n- Until updated, restrict agent-level accounts to trusted staff.","status":"open","published_at":"2026-10-21T06:16:45+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","triaged_at":"2026-10-25T04:48:01+00:00","updated_at":"2026-10-25T04:48:01+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T04:48:01Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Appointment Booking Plugin to `5.7.5` or later.\n- Until updated, restrict agent-level accounts to trusted staff.","reach":"internet","title":"Appointment Booking WordPress plugin: agents can read every customer's record","impact":"medium","summary":"The Appointment Booking Plugin for WordPress, before version 5.7.5, does not check whether an authenticated agent is assigned to a customer before returning that customer's record. Any logged-in agent can read and enumerate personal data for all customers on the site, including those managed by other agents.","category":"package","nicknames":[],"who_cares":["wordpress","appointment-booking-plugin","self-hosted"],"confidence":0.7,"needs_auth":"yes","worst_case":"Any agent account reads personal data of all customers on the site","analyst_note":"","how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins; affected if below `5.7.5`.\n- Review the plugin's customer lookup and search endpoints for an assignment check before returning records (unknown if sources give file names).","needs_analyst":false,"not_affected_if":["plugin-version-5.7.5-or-later","no-agent-role-users"],"who_is_affected":"Sites running the Appointment Booking Plugin for WordPress before 5.7.5 that have agent-level users. The exposure comes from authenticated agents seeing customers assigned to other agents, so sites with only administrators or no agent role are less exposed. Sites on 5.7.5 or later are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000619,"input_tokens":3359,"output_tokens":566,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-105257':14A,17A '-2026':13A,16A '5.7.5':35B,84C 'agent':5A,42B,58B,76B,92C,110C,129C 'agent-level':91C 'allow':108C 'appoint':1A,19B,28B,78C 'appointment-booking-plugin':18B 'assign':44B,96C 'authent':41B,90C 'book':2A,20B,29B,79C 'check':38B 'custom':9A,47B,51B,67B,99C,105C,120C 'cve':12A,15A 'data':64B 'enumer':62B,114C 'everi':8A,119C 'host':25B 'includ':71B,124C 'inform':117C 'level':93C 'log':56B 'logged-in':55B 'manag':73B,126C 'packag':22B 'person':63B,116C 'plugin':4A,21B,30B,80C,82C 'read':7A,60B,112C 'record':11A,53B,107C 'return':49B,101C 'search':103C 'self':24B 'self-host':23B 'site':70B,123C 'user':94C 'verifi':87C 'version':34B 'whether':39B 'wordpress':3A,26B,32B,81C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Appointment Booking Plugin for WordPress before 5.7.5 that have agent-level users. The exposure comes from authenticated agents seeing customers assigned to other agents, so sites with only administrators or no agent role are less exposed. Sites on 5.7.5 or later are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T06:16:45+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105257","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105257","severity":null,"published_at":"2026-10-21T06:16:45+00:00","modified_at":"2026-10-21T18:37:38+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-105257","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-105257","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}