CVE-2026-121636

The Quick Event Manager WordPress plugin (versions 9.9.5 through 9.18) contains a vulnerability where it fails to verify the authenticity of PayPal payment notifications . This flaw is triggered via the 'debug' parameter , allowing unauthenticated attackers to bypass IPN verification and mark eve...