CVE-2026-114192

WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability

Magepeople inc. WpEvently

Open in Threatline Record JSON

CVSS

6.5Medium

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed inNone listedNo source names a fixed version yet

Published24 Oct 2026Updated 24 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-114192 Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently:Telegram: CVE Notify, 24 Oct 2026

Description

Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.

Text from CVE List

Affected versions 1

WpEventlyaffected: all versions through 5.7.8CVE List

References 1

patchstack.com/database/wordpress/plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-7-8-broken-access-control-vulnerability?_s_id=cveReferencevia CVE List