CVE-2026-14205

CVE-2026-14205 affects the WP Events Manager WordPress plugin prior to 2.2.5. The vulnerability arises because the plugin does not validate the requested quantity when registering for a paid event, so the price is computed from an attacker-controlled quantity. This allows any authenticated user t...