Advisories · Technology

Magepeople inc. WpEvently.

Every CVE that names Magepeople inc. WpEvently among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116394 CVE record

CVSS 5.3 Medium

WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
- Magepeople inc. WpEvently
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2026
CVE-2026-114192 CVE record

CVSS 6.5 Medium

WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
- Magepeople inc. WpEvently
- Broken access control
Not analysed yet 24 Oct 2026
CVE-2026-81802 CVE record

CVSS 6.5 Medium

WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability
- Magepeople inc. WpEvently
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-81761 CVE record

CVSS 4.3 Medium

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
- Magepeople inc. WpEvently
- Broken access control
Not analysed yet 28 Aug 2026
CVE-2026-81759 CVE record

CVSS 5.4 Medium

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
- Magepeople inc. WpEvently
- Broken access control
Not analysed yet 28 Aug 2026
CVE-2026-45441 CVE record

CVSS 7.5 High

WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability
- Magepeople inc. WpEvently
- CWE-1284
Not analysed yet 15 Jun 2026
CVE-2024-32110 CVE record

CVSS 4.3 Medium

WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability
- Magepeople inc. WpEvently
- Cross-site request forgery (CSRF)
Not analysed yet 11 Jun 2026