| CVE-2026-88800 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
|
9.1
Critical
|
Nov 6, 2026 |
| CVE-2026-88801 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
|
8.0
High
|
Nov 6, 2026 |
| CVE-2026-88799 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
|
8.8
High
|
Nov 6, 2026 |
| CVE-2026-88802 |
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3…
|
7.5
High
|
Sep 13, 2026 |
| CVE-2022-1194 |
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting…
|
Not rated
|
Sep 16, 2022 |
| CVE-2021-25049 |
The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing…
|
Not rated
|
Jan 24, 2022 |