CVE-2026-45441
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
WpEvently versions up to 5.3.3 contain an unauthenticated vulnerability that could be exploited by attackers.
Risk Assessment
Organizations using this plugin may be exposed to unauthorized access and potential attacks.
Recommendation
It is recommended to update the WpEvently plugin to the latest version to mitigate the risk.
Other vulnerabilities in WpEvently
See all- CVE-2026-81761Medium
The WpEvently plugin in versions 5.5.0 and earlier has a Broken Access Control vulnerability for subscribers. Subscriber-level users can gain unauthorized access to administrative functions.
- CVE-2026-81759Medium
The WpEvently plugin in versions 5.5.0 and earlier has a Broken Access Control vulnerability for contributors. Contributor-level users can gain unauthorized access to administrative functions.
- CVE-2024-32110Medium
A Cross-Site Request Forgery (CSRF) vulnerability was found in the WpEvently plugin for WordPress up to version 4.1.2. Lack of proper protections allows an attacker to perform unauthorized actions in the context of an authenticated user.
Original NVD description (English source)
Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.