CVE-2026-88799

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-88799", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-09-10T08:27:51.410Z", "datePublished": "2026-11-06T07:30:53.438Z", "dateUpdated": "2026-11-06T11:50:25.910Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-11-06T07:30:53.438Z"}, "title": "MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR", "problemTypes": [{"descriptions": [{"description": "CWE-639 Authorization Bypass Through User-Controlled Key", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "MDJM Event Management", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.7.8.7", "versionType": "semver"}]}, {"vendor": "Unknown", "product": "Mobile Events Manager", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.7.8.7", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the identifier supplied to their client profile update, allowing any authenticated user, such as a subscriber, to change the password and email address of any other account including an administrator, resulting in a full account takeover."}], "references": [{"url": "https://wpscan.com/vulnerability/d808129b-e0cc-400a-9c30-33a9d0e357e9/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Morato Antoine", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88799", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-06T11:40:55.490687Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T11:50:25.910Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-88799", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-06T11:40:55.490687Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T11:42:46.507Z"}}], "cna": {"title": "MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Morato Antoine"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Unknown", "product": "MDJM Event Management", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.7.8.7"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown"}, {"vendor": "Unknown", "product": "Mobile Events Manager", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.7.8.7"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown"}], "references": [{"url": "https://wpscan.com/vulnerability/d808129b-e0cc-400a-9c30-33a9d0e357e9/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the identifier supplied to their client profile update, allowing any authenticated user, such as a subscriber, to change the password and email address of any other account including an administrator, resulting in a full account takeover."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-11-06T07:30:53.438Z"}}}, "cveMetadata": {"cveId": "CVE-2026-88799", "state": "PUBLISHED", "dateUpdated": "2026-11-06T11:50:25.910Z", "dateReserved": "2026-09-10T08:27:51.410Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-11-06T07:30:53.438Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown", "product": "MDJM Event Management", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.7.8.7", "status": "affected", "version": "0", "versionType": "semver"}]}, {"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown", "product": "Mobile Events Manager", "vendor": "Unknown", "versions": [{"lessThanOrEqual": "1.7.8.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "contact@wpscan.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the identifier supplied to their client profile update, allowing any authenticated user, such as a subscriber, to change the password and email address of any other account including an administrator, resulting in a full account takeover."}], "id": "CVE-2026-88799", "lastModified": "2026-11-06T20:09:13.780", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "contact@wpscan.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-88799", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T11:40:55.490687Z", "version": "2.0.3"}}]}, "published": "2026-11-06T08:17:38.130", "references": [{"source": "contact@wpscan.com", "url": "https://wpscan.com/vulnerability/d808129b-e0cc-400a-9c30-33a9d0e357e9/"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "mdjm-event-management: mobile-events-manager: MDJM Event Management and Mobile Events Manager: Privilege escalation via missing authorization check in profile updates", "id": "2568045", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2568045"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-639", "details": ["A flaw was found in the MDJM Event Management and Mobile Events Manager WordPress plugins. The software fails to properly verify user permissions and ownership when processing client profile update requests. An authenticated user with low privileges can exploit this vulnerability by submitting another user's identifier, allowing them to change the email address and password of any target account, including administrators. This flaw can lead to complete privilege escalation and unauthorized account takeover."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-88799", "public_date": "2026-11-06T07:30:53Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-88799"], "statement": "This vulnerability is rated as an Important severity because an authenticated attacker with low-level privileges can remotely modify administrative account credentials, leading to a complete compromise of the affected web application. Red Hat does not distribute or maintain the MDJM Event Management or Mobile Events Manager WordPress plugins in any supported offerings. Therefore, Red Hat products are not directly impacted by this vulnerability.", "threat_severity": "Important"}

{"created": "2026-11-06T08:30:15.606061+00:00", "updated": "2026-11-06T08:30:15.606067+00:00", "vendors": [], "weaknesses": ["CWE-639", "CWE-284"]}