CVE-2026-107432: WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Event post pluginto a version that resolves this vulnerability.Fixed in 6.1.2
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.
What impact could successful exploitation have?
The reported impact is low confidentiality and low integrity impact, with no availability impact. The issue is described as missing authorization caused by incorrectly configured access-control security levels.
Which versions are affected?
Event post versions through 6.1.1 are affected. The available information does not identify a fixed version.