CVE-2026-93661

The Events Manager WordPress plugin, in versions before 7.4.5 , contains a vulnerability allowing for arbitrary ticket overwrite via an IDOR (Insecure Direct Object Reference) flaw. The plugin fails to prevent a ticket-update request from replacing the identifiers of the ticket it was originally ...