| CVE-2026-88800 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
|
9.1
Critique
|
6 nov. 2026 |
| CVE-2026-88801 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
|
8.0
Élevée
|
6 nov. 2026 |
| CVE-2026-88799 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
|
8.8
Élevée
|
6 nov. 2026 |
| CVE-2026-88802 |
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3…
|
7.5
Élevée
|
13 sept. 2026 |