The KiviCare WordPress plugin is affected by an authentication bypass vulnerability that allows attackers to potentially compromise user accounts via password recovery.

This is an authentication bypass vulnerability (CWE-288) utilizing an alternate path or channel. An unauthenticated attacker can exploit this flaw to manipulate the password recovery mechanism and gain unauthorized access to the application.

Successful exploitation allows an attacker to take over administrative or user accounts, leading to unauthorized access to sensitive patient data and clinic management systems. With a CVSS score of 8.2, this vulnerability poses a severe risk to data privacy and regulatory compliance in healthcare environments.

Immediate Action: Update the KiviCare – Clinic & Patient Management System (EHR) plugin to version 4.4.0 or later immediately.

Proactive Monitoring: Review user account modification logs and password reset requests for suspicious activity or unauthorized account changes.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests directed at the password recovery endpoint.

Public Exploit Available: No

Administrators must update the KiviCare plugin to version 4.4.0 as soon as possible. Given the sensitivity of the data handled by this clinic management system, maintaining an up-to-date installation is critical to preventing unauthorized account access.