EUVD-2026-30217

🗓️ 14 May 2026 03:27:14Reported by EUVDType

Attackers bypass authorization in My Calendar up to version 3.7.9 by POST tampering to publish events.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-7525	14 May 202603:27	–	attackerkb
Circl	CVE-2026-7525	15 May 202606:32	–	circl
CNNVD	WordPress plugin My Calendar – Accessible Event Manager 安全漏洞	14 May 202600:00	–	cnnvd
CVE	CVE-2026-7525	14 May 202603:27	–	cve
Cvelist	CVE-2026-7525 My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter	14 May 202603:27	–	cvelist
NVD	CVE-2026-7525	14 May 202605:16	–	nvd
Patchstack	WordPress My Calendar – Accessible Event Manager plugin <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication vulnerability	13 May 202600:00	–	patchstack
Positive Technologies	PT-2026-40850	14 May 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-7525 My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter	14 May 202603:27	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "13119298-0a36-329d-8bec-fe90b062b06b",
        "vendor": {
          "name": "joedolson"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c7bbc20f-a8a4-37d7-a9c5-7b3f353c45e7",
        "product": {
          "name": "My Calendar – Accessible Event Manager"
        },
        "product_version": "0 ≤3.7.9"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3e27c0b0-c74f-47ad-b9ed-9fd6bd05d040
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/trunk/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.9/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/trunk/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.9/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/trunk/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.9/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.4/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.4/my-calendar-event-editor.php
plugins	www.plugins.trac.wordpress.org/browser/my-calendar/tags/3.7.4/my-calendar-event-editor.php

14 May 2026 10:47Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.14.3

EPSS0.00017

SSVC