CVE Intelligence

Magepeople inc. WpEvently vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Magepeople inc. WpEvently: 5 record(s), with affected versions and fixes.

CVE-2026-81802 Medium · 6.5 CWE-639 Sep 8, 2026
WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
CVE-2026-81761 Medium · 4.3 CWE-862 Aug 28, 2026
WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-81759 Medium · 5.4 CWE-862 Aug 28, 2026
WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WpEvently <= 5.5.0 versions.
CVE-2026-45441 High · 7.5 CWE-1284 Jun 15, 2026
WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability
Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.
CVE-2024-32110 Medium · 4.3 CWE-352 Jun 11, 2026
WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This issue affects WpEvently: from n/a through 4.1.2.