| CVE-2026-88800 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
|
9.1
Critical
|
Nov 6, 2026 |
| CVE-2026-88801 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
|
8.0
High
|
Nov 6, 2026 |
| CVE-2026-88799 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
|
8.8
High
|
Nov 6, 2026 |
| CVE-2026-88802 |
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3…
|
7.5
High
|
Sep 13, 2026 |