PT-2026-48631

Cross-Site request forgery CSRF vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2...

CVE-2026-22394

CVE-2026-22394 is a Local File Inclusion vulnerability in Mikado-Themes Evently WordPress Theme (Evently) up to version 1.7. Described as Improper Control of Filename for Include/Require Statement, it enables PHP Local File Inclusion via the Evently include/require mechanism. Public records list ...