78 matches found
CVE-2026-82214
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts...
CVE-2026-82214
The Quick Event Manager WordPress plugin versions before 9.19 (specifically versions 8.4.6 through 9.18) is vulnerable to unauthenticated content disclosure. The plugin fails to verify the status or type of a requested post when returning details via a calendar export (ICS download). This flaw al...
CVE-2026-82214 Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts...
WordPress Quick Event Manager plugin 8.4.6-9.18 - Unauthenticated Private and Draft Content Disclosure vulnerability
Unauthenticated Private and Draft Content Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Quick Event Manager versions 8.4.6-9.18...
EUVD-2026-114589
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts...
Quick Event Manager < 9.7.5 - Cross-Site Scripting
The Quick Event Manager WordPress Plugin, version 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qemajaxcalendar' action. id: CVE-2023-23491 info: name: Quick Event Manager 9.7.5 - Cross-Site Scripting author: ritikchaddha severity: medium...
CVE-2026-82214: Unknown Quick Event Manager: The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before…
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts...
CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84848
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84848 WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84848
The WordPress Quick Event Manager plugin (versions
EUVD-2026-70566
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84848 WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
EUVD-2026-70567
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84847
CVE-2026-84847 affects the WordPress Quick Event Manager plugin in versions 9.17 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker with no prior access can exploit it over the network with low complexity and no user interaction. The CVSS 3.1 sco...
CVE-2026-84847 WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84847 WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
WordPress Quick Event Manager plugin <= 9.18 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Quick Event Manager versions = 9.18...
WordPress Quick Event Manager plugin <= 9.18 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by she11f in WordPress Plugin Quick Event Manager versions = 9.18...