PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-68045 Arraytics CVE debrief

CVE-2025-68045 is a HIGH severity vulnerability in the WP Event Solution plugin for WordPress. The vulnerability has a CVSS score of 7.5 and is categorized as Unauthenticated Broken Access Control. It affects plugin versions <= 4.1.12.

Vendor
Arraytics
Product
WP Event SOlution
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-16
Original CVE updated
2026-06-16
Advisory published
2026-06-16
Advisory updated
2026-06-16

Who should care

Users of WP Event Solution plugin versions <= 4.1.12 should apply patches or mitigations to prevent exploitation.

Technical summary

The vulnerability is caused by Unauthenticated Broken Access Control in WP Event Solution plugin versions <= 4.1.12. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a high severity vulnerability that allows attackers to access sensitive information without authentication.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches or updates to WP Event Solution plugin versions <= 4.1.12.
  • Refer to [ref-4](https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-12-broken-access-control-vulnerability?_s_id=cve) for mitigation or vendor guidance

Evidence notes

The vulnerability was reported by [email protected] and is listed in the NVD database.

Official resources

CVE-2025-68045 was published on 2026-06-16T10:16:25.657Z and last modified on 2026-06-16T10:16:25.657Z.