CVE-2026-13173

The Eventin WordPress plugin (versions before 4.1.21 ) is vulnerable to an authorization flaw during the speaker creation process. The plugin fails to verify if the current user has the necessary permissions to edit other users' profiles before assigning roles and updating user metadata. This all...