A Missing Authorization vulnerability in the WordPress Event post plugin allows attackers to exploit incorrectly configured access control security levels. This issue affects Event post versions from n/a through 6.1.1. The vulnerability could allow unauthorized access or actions within the plugin, potentially leading to unintended changes or data exposure. Defenders should assess their exposure and priori [truncated]
MEDIUMNOUS Ouvert Utile et SimpleCVE published 2026-10-12
The CVE-2026-107427 vulnerability affects the WordPress Event post plugin, versions up to and including 6.1.1. This Insecure Direct Object References (IDOR) vulnerability allows for authorization bypass through user-controlled keys. The issue has been addressed in version 6.1.2. Defenders should assess their exposure to this vulnerability and prioritize updating to version 6.1.2 or later. The vulnerabilit [truncated]
