CVE-2025-14029

creationtimestamp| type| source ---|---|--- 2026-01-17 07:48:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcm4qphdfr2h...

CVE-2025-14029 Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxadmineventapproval function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to approve arbitrary events via t...