| CVE-2026-88800 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
|
9.1
Critique
|
6 nov. 2026 |
| CVE-2026-88801 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
|
8.0
Élevée
|
6 nov. 2026 |
| CVE-2026-88799 |
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
|
8.8
Élevée
|
6 nov. 2026 |
| CVE-2026-88802 |
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3…
|
7.5
Élevée
|
13 sept. 2026 |
| CVE-2022-1194 |
The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting…
|
Non notée
|
16 sept. 2022 |
| CVE-2021-25049 |
The Mobile Events Manager WordPress plugin before 1.4.4 does not sanitise and escape various of its settings, allowing…
|
Non notée
|
24 janv. 2022 |