590 matches found
CVE-2026-104798
The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public mcs GET parameter is reflected into post content unsanitized before WordPress core's doshortcode filter runs, allowing an unauthenticated...
EUVD-2026-102653
The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public mcs GET parameter is reflected into post content unsanitized before WordPress core's doshortcode filter runs, allowing an unauthenticated...
Quick Event Manager < 9.7.5 - Cross-Site Scripting
The Quick Event Manager WordPress Plugin, version 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qemajaxcalendar' action. id: CVE-2023-23491 info: name: Quick Event Manager 9.7.5 - Cross-Site Scripting author: ritikchaddha severity: medium...
SolarWinds Security Event Manager - Unauthenticated RCE
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution. id: CVE-2024-0692 info: name: SolarWinds Security Event Manager - Unauthenticated RCE...
CVE-2026-77991
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77991 CVE-2026-77991 JEM - Joomla Event Manager 5.0.0 - joomlaeventmanager.net I am @abraxasnull. Loopback lab. The client is CVE-2026-77991-Abraxas-Labs.py. The advisory named a model. Privileged RCE:...
CVE-2026-62041
Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through 3.4.1...
CVE-2026-62041
The WP Event Manager plugin for WordPress (versions
CVE-2026-62041 WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through 3.4.1...
EUVD-2026-95728
Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through 3.4.1...
WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by superx in WordPress Plugin WP Event Manager versions = 3.4.1...
PT-2026-108878
Name of the Vulnerable Software and Affected Versions WP Event Manager versions prior to 3.4.2 Description A missing authorization issue exists that allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.4.2 or later...
Exploit for CVE-2026-77991
abraxaslabs.tech · github.com/abraxas ·&...
CVE-2026-77187: Improper Neutralization of Input During Web Page Generation
The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
CVE-2026-77186: Improper Neutralization of Input During Web Page Generation
The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fallback' Shortcode Attribute in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...
CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84848
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84848 WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
EUVD-2026-70566
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...