CVE-2026-82214

The Quick Event Manager WordPress plugin versions before 9.19 (specifically versions 8.4.6 through 9.18) is vulnerable to unauthenticated content disclosure. The plugin fails to verify the status or type of a requested post when returning details via a calendar export (ICS download). This flaw al...