CVE Catalog
CVE-2026-39535
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
The Display Eventbrite Events plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
Unauthorized users can access functions or data that should be protected, potentially leading to security breaches.
Recommendation
Update the Display Eventbrite Events plugin to version 6.5.7 or later.
Original NVD description (English source)
Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display Eventbrite Events: from n/a through <= 6.5.6.