Search vulnerabilities

Results 6

Export CSV
CVE-2026-112844

WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
CVE-2026-110380

WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-109898

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-105073

WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
CVE-2026-103684

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed