5.3
Moyenne
CVE-2026-82214 The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before…
Description
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Quick Event Manager 8.4 | 8.4.6 → < 9.19 | 9.19 |