Unrated
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the...
CVE-2026-82214
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| CVE | Quick Event Manager |
≥ 8.4.6, < 9.19 |
9.19 |
Original description The description as published by the source.
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com