CVE-2026-114192: WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WpEvently pluginto a version that resolves this vulnerability.Fixed in 5.7.9
Event History
Frequently Asked Questions
Which installations are affected?
MagePeople WpEvently installations through version 5.7.8 are affected. The available data does not identify a lower affected version boundary.
Does exploitation require authentication or user interaction?
No. The vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.
What impact can exploitation have?
The reported impact is limited confidentiality and integrity impact, with no reported availability impact. The issue is categorized as broken access control caused by missing authorization.