CVE-2026-28173

HighCVSS 7.1

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

WP Event Solution plugin versions up to 4.1.19 contain a Customer Arbitrary Content Deletion vulnerability. A user with customer role can delete arbitrary content.

Risk Assessment

The risk includes unauthorized content deletion, potentially leading to data loss and system integrity compromise.

Recommendation

Update the WP Event Solution plugin to the latest version that fixes the content deletion issue.

Original NVD description (English source)

Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.