CVE Catalog
CVE-2026-65486
MediumCVSS 5.3Summary
The Event post plugin versions up to 6.0.1 contain an unauthenticated broken access control vulnerability. An attacker without authentication can bypass access control mechanisms.
Risk Assessment
An unauthorized user may gain access to sensitive functions or data, potentially leading to privilege escalation or information disclosure.
Recommendation
Immediately update the Event post plugin to the latest available version.
Other vulnerabilities in Event post
Original NVD description (English source)
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS