CVE-2026-81802

Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...

CVE-2026-81802 WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...

CVE-2026-81802 WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...

EUVD-2026-72645

Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...

CVE-2026-81802

WpEvently (WordPress plugin, also listed as Mage EventPress) versions ≤ 5.6.0 contain an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating a network-exploitable issue requiring...

PT-2026-86991

Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...

CVE-2026-81761

Subscriber Broken Access Control in WpEvently = 5.5.0 versions...

CVE-2026-81759

Contributor Broken Access Control in WpEvently = 5.5.0 versions...

CVE-2026-81761 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in WpEvently = 5.5.0 versions...

EUVD-2026-67733

Subscriber Broken Access Control in WpEvently = 5.5.0 versions...

CVE-2026-81761

WpEvently is a WordPress plugin affected by a Broken Access Control vulnerability in versions ≤ 5.5.0 . The flaw allows a Subscriber -level user to perform actions beyond their intended permissions, resulting in a low confidentiality impact with no integrity or availability loss. The CVSS 3.1 sco...

EUVD-2026-67731

Contributor Broken Access Control in WpEvently = 5.5.0 versions...

CVE-2026-81759

WpEvently is a WordPress plugin (by Mage EventPress) affected by a Broken Access Control vulnerability in versions

CVE-2026-81759 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WpEvently = 5.5.0 versions...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

CVE-2026-45441

Unauthenticated Other Vulnerability Type in WpEvently = 5.3.3 versions...

EUVD-2026-36842

Unauthenticated Other Vulnerability Type in WpEvently = 5.3.3 versions...

CVE-2026-45441 WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability

Unauthenticated Other Vulnerability Type in WpEvently = 5.3.3 versions...

CVE-2026-45441

CVE-2026-45441 affects the WordPress WpEvently plugin up to version 5.3.3. It is described as unauthenticated, of the “Other Vulnerability Type”, with CVSSv3.1 base score 7.5 (NETWORK, LOW attack complexity, PR/NONE, I/H, UI/NONE). The provided documents do not specify the exact root cause, vulne...