5.3 Medium

CVE-2026-82214 The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before…

Description

The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.

Affected products and versions

Product	Affected versions	Fixed in
Quick Event Manager 8.4	8.4.6 → < 9.19	9.19

The 2 CVEs of Quick Event Manager →

CVE-2026-121636 Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter 5.3 Medium

Do you use Quick Event Manager?

Track this CVE Watch Quick Event Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2026-82214

Timeline

Published October 31, 2026
Last modified November 1, 2026

References

wpscan.com wpscan.com

Track this CVE

CVE-2026-82214 The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before…

Description

Affected products and versions

Other CVEs of Quick Event Manager