Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610.
Published: 2026-08-13
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an unauthenticated sensitive data exposure that permits any user to read confidential information handled by the KiviCare WordPress plugin. The weakness is identified as CWE-288 and allows attackers to gain unauthorized access to data without needing valid credentials.

Affected Systems

The flaw impacts the Iqonic Design KiviCare plugin for WordPress, specifically versions 4.5.1 and earlier. Websites running those plugin versions are vulnerable.

Risk and Exploitability

The issue has a CVSS score of 7.5 and is not listed in the CISA KEV catalog; its EPSS score is not available. Based on the description, it is inferred that attackers can exploit the flaw by accessing URLs of the site, indicating a network-based, unauthenticated attack vector. The resulting loss of confidentiality exposes sensitive data stored by the plugin.

Generated by OpenCVE AI on August 13, 2026 at 17:02 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the KiviCare plugin to version 4.5.2 or later to apply the vendor-supplied fix.
  • If an upgrade cannot occur immediately, disable the KiviCare plugin on the site to eliminate the exposure until a patch is available.
  • Configure server or application‑level access controls to require authentication before any KiviCare data endpoints can be reached, providing a temporary preventive measure.

Generated by OpenCVE AI on August 13, 2026 at 17:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References

No reference.

History

Fri, 14 Aug 2026 13:30:00 +0000

Type Values Removed Values Added
Title WordPress KiviCare plugin <= 4.5.1 - Sensitive Data Exposure vulnerability
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 14 Aug 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Iqonic
Iqonic kivicare
Wordpress
Wordpress wordpress
Vendors & Products Iqonic
Iqonic kivicare
Wordpress
Wordpress wordpress

Fri, 14 Aug 2026 09:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-288
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Fri, 14 Aug 2026 09:15:00 +0000

Type Values Removed Values Added
Description Unauthenticated Sensitive Data Exposure in KiviCare <= 4.5.1 versions. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610.
Title WordPress KiviCare plugin <= 4.5.1 - Sensitive Data Exposure vulnerability

Thu, 13 Aug 2026 14:00:00 +0000

Type Values Removed Values Added
Description Unauthenticated Sensitive Data Exposure in KiviCare <= 4.5.1 versions.
Title WordPress KiviCare plugin <= 4.5.1 - Sensitive Data Exposure vulnerability
Weaknesses CWE-288
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Iqonic Kivicare
Wordpress Wordpress
cve-icon MITRE

Status: REJECTED

Assigner: Patchstack

Published:

Updated: 2026-08-14T08:44:47.413Z

Reserved: 2026-08-11T10:58:36.297Z

Link: CVE-2026-73188

cve-icon Vulnrichment

Updated: 2026-08-13T15:32:03.938Z

cve-icon NVD

Status : Rejected

Published: 2026-08-13T14:17:12.470

Modified: 2026-08-14T09:16:49.050

Link: CVE-2026-73188

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-14T12:15:05Z

Weaknesses

No weakness.