CVE-2026-110380: WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Arraytics WP Event Solutionto a version that resolves this vulnerability.Fixed in 4.1.27
Event History
Frequently Asked Questions
Which installations are affected?
Arraytics WP Event Solution installations running version 4.1.26 or earlier are affected. The affected version range begins at an unspecified earlier version.
Does exploiting this issue require authentication or user interaction?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely security impact?
The stated impact is integrity-only and rated medium severity with a CVSS score of 5.3. The provided data does not identify which actions or resources can be accessed or modified.