CVE-2026-28174: WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
Published Aug 13, 2026
·Updated
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
Affected Software
1 affected component
wp-plugin/WP Event SOlution<=4.1.18
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Event SOlutionto a version that resolves this vulnerability.Fixed in 4.1.19
Event History
Aug 13, 2026
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-28174?
The severity of CVE-2026-28174 is medium with a score of 6.5.
2
What data is exposed in CVE-2026-28174?
CVE-2026-28174 exposes customer sensitive data in the WP Event SOlution plugin versions up to 4.1.18.
3
How do I fix CVE-2026-28174?
To fix CVE-2026-28174, update the WP Event SOlution plugin to a version later than 4.1.18.
4
What is the risk associated with CVE-2026-28174?
CVE-2026-28174 has a risk rating of 38, indicating potential moderate impact if exploited.
5
Who is affected by CVE-2026-28174?
Users of the WP Event SOlution plugin versions 4.1.18 and earlier are affected by CVE-2026-28174.