1782 matches found
CVE-2026-14843 Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
EUVD-2026-51414
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
CVE-2026-14843 Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
CVE-2026-14843
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
CVE-2026-14843
The Events Made Easy WordPress plugin versions before 3.1.4 is vulnerable to an Insecure Direct Object Reference (IDOR) . The plugin fails to verify if a requester is authorized to modify a targeted record when processing unauthenticated data-change requests. Because the system relies solely on a...
PT-2026-66701
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
CVE-2026-14843: Authorization Bypass Through User-Controlled Key
The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an unauthenticated data-change request, relying only on a public nonce with no per-record token or ownership check, allowing unauthenticated attackers to...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557 WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557
CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions
EUVD-2026-49224
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557 WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557: Missing Authorization
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
PT-2026-64943
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by HieuPenguinnn in WordPress Plugin Events Made Easy versions = 3.1.3...
EUVD-2026-44984
The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.9.21, the fetch-apify-docs tool in src/tools/common/fetchapifydocs.ts validates allowlisted documentation domains with...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
poc-CVE-2019-9053 PoC didático em Python 3 para a CVE-2...