CVE-2026-61946

Easy Appointments versions up to 3.12.27 are vulnerable to unauthenticated Insecure Direct Object References (IDOR), allowing attackers to access or manipulate data without proper authorization. This vulnerability could lead to unauthorized data exposure or modification, posing a risk to user privacy and data integrity. Organizations using affected versions should prioritize patching to mitigate potential exploitation.