{"schema_version":"2","view":"grouped","data":[{"id":56321,"cve_ids":["CVE-2026-112844"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-112844","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112844","aliases":["CVE-2026-112844"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-24T14:46:57.569Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-cross-site-scripting-xss-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112844","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:38:08.434295Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:46:57.569Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-24T08:00:10.546Z"}}},"related_cves":[{"value":"CVE-2026-112844","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5b7a2e35-b875-427d-9291-d118ba029adb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112844","advisory_id":"5b7a2e35-b875-427d-9291-d118ba029adb","event_types":["advisory"],"published_at":"2026-10-25T16:12:50.399561+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T08:00:10.546+00:00","detail_url":"/advisories/advisory%3A5b7a2e35-b875-427d-9291-d118ba029adb","group":{"id":"advisory:5b7a2e35-b875-427d-9291-d118ba029adb","revision":1,"primary_event_id":55844,"change":"published","superseded_by":[],"changed":{"id":55844,"cve_ids":["CVE-2026-112844"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-112844","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112844","aliases":["CVE-2026-112844"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-24T14:46:57.569Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-cross-site-scripting-xss-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112844","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:38:08.434295Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:46:57.569Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-24T08:00:10.546Z"}}},"related_cves":[{"value":"CVE-2026-112844","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5b7a2e35-b875-427d-9291-d118ba029adb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112844","advisory_id":"5b7a2e35-b875-427d-9291-d118ba029adb","event_types":["advisory"],"published_at":"2026-10-25T16:12:50.399561+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T08:00:10.546+00:00","detail_url":"/events/55844"},"members":[{"id":55844,"cve_ids":["CVE-2026-112844"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-112844","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112844","aliases":["CVE-2026-112844"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-24T14:46:57.569Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-cross-site-scripting-xss-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112844","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:38:08.434295Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:46:57.569Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-24T08:00:10.546Z"}}},"related_cves":[{"value":"CVE-2026-112844","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:5b7a2e35-b875-427d-9291-d118ba029adb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112844","advisory_id":"5b7a2e35-b875-427d-9291-d118ba029adb","event_types":["advisory"],"published_at":"2026-10-25T16:12:50.399561+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T08:00:10.546+00:00","detail_url":"/events/55844"}]}},{"id":46167,"cve_ids":["CVE-2025-68045"],"payload":{"kind":"advisory","title":"WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.12.","evidence":"cve:CVE-2025-68045","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-68045","aliases":["CVE-2025-68045"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.13","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.12"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-21T06:38:36.546Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-12-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-68045","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-16T14:47:27.610572Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-16T14:47:37.226Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-21T06:38:36.546Z"}}},"related_cves":[{"value":"CVE-2025-68045","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0c483de0-b9a5-453f-8b98-331aae5584f1","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-68045","advisory_id":"0c483de0-b9a5-453f-8b98-331aae5584f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:55.335027+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-06-16T09:00:29.079+00:00","detail_url":"/advisories/advisory%3A0c483de0-b9a5-453f-8b98-331aae5584f1","group":{"id":"advisory:0c483de0-b9a5-453f-8b98-331aae5584f1","revision":1,"primary_event_id":45721,"change":"published","superseded_by":[],"changed":{"id":45721,"cve_ids":["CVE-2025-68045"],"payload":{"kind":"advisory","title":"WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.12.","evidence":"cve:CVE-2025-68045","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-68045","aliases":["CVE-2025-68045"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.13","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.12"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-21T06:38:36.546Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-12-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-68045","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-16T14:47:27.610572Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-16T14:47:37.226Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-21T06:38:36.546Z"}}},"related_cves":[{"value":"CVE-2025-68045","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0c483de0-b9a5-453f-8b98-331aae5584f1","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-68045","advisory_id":"0c483de0-b9a5-453f-8b98-331aae5584f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:55.335027+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-06-16T09:00:29.079+00:00","detail_url":"/events/45721"},"members":[{"id":45721,"cve_ids":["CVE-2025-68045"],"payload":{"kind":"advisory","title":"WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.12.","evidence":"cve:CVE-2025-68045","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2025-68045","aliases":["CVE-2025-68045"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.13","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.12"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-21T06:38:36.546Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-12-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-68045","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-16T14:47:27.610572Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-16T14:47:37.226Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-21T06:38:36.546Z"}}},"related_cves":[{"value":"CVE-2025-68045","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0c483de0-b9a5-453f-8b98-331aae5584f1","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-68045","advisory_id":"0c483de0-b9a5-453f-8b98-331aae5584f1","event_types":["advisory"],"published_at":"2026-10-25T12:37:55.335027+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-06-16T09:00:29.079+00:00","detail_url":"/events/45721"}]}},{"id":32862,"cve_ids":["CVE-2026-110380"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-110380","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110380","aliases":["CVE-2026-110380"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-16T14:59:31.070Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110380","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T14:52:49.874297Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T14:59:31.070Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-16T12:31:16.239Z"}}},"related_cves":[{"value":"CVE-2026-110380","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3ec17bdb-9b41-4c7f-9737-68184c9ba51f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110380","advisory_id":"3ec17bdb-9b41-4c7f-9737-68184c9ba51f","event_types":["advisory"],"published_at":"2026-10-25T08:52:05.520305+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-16T12:31:15.231+00:00","detail_url":"/advisories/advisory%3A3ec17bdb-9b41-4c7f-9737-68184c9ba51f","group":{"id":"advisory:3ec17bdb-9b41-4c7f-9737-68184c9ba51f","revision":1,"primary_event_id":32591,"change":"published","superseded_by":[],"changed":{"id":32591,"cve_ids":["CVE-2026-110380"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-110380","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110380","aliases":["CVE-2026-110380"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-16T14:59:31.070Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110380","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T14:52:49.874297Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T14:59:31.070Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-16T12:31:16.239Z"}}},"related_cves":[{"value":"CVE-2026-110380","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3ec17bdb-9b41-4c7f-9737-68184c9ba51f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110380","advisory_id":"3ec17bdb-9b41-4c7f-9737-68184c9ba51f","event_types":["advisory"],"published_at":"2026-10-25T08:52:05.520305+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-16T12:31:15.231+00:00","detail_url":"/events/32591"},"members":[{"id":32591,"cve_ids":["CVE-2026-110380"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.","evidence":"cve:CVE-2026-110380","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110380","aliases":["CVE-2026-110380"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.27","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.26"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-16T14:59:31.070Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110380","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T14:52:49.874297Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T14:59:31.070Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-16T12:31:16.239Z"}}},"related_cves":[{"value":"CVE-2026-110380","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3ec17bdb-9b41-4c7f-9737-68184c9ba51f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110380","advisory_id":"3ec17bdb-9b41-4c7f-9737-68184c9ba51f","event_types":["advisory"],"published_at":"2026-10-25T08:52:05.520305+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-16T12:31:15.231+00:00","detail_url":"/events/32591"}]}},{"id":30059,"cve_ids":["CVE-2026-109898"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-109898","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109898","aliases":["CVE-2026-109898"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-15T16:43:51.594Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-3?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T10:53:46.359957Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T16:43:51.594Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-13T16:23:02.576Z"}}},"related_cves":[{"value":"CVE-2026-109898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109898","advisory_id":"f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","event_types":["advisory"],"published_at":"2026-10-25T08:05:47.300236+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-13T16:23:02.114+00:00","detail_url":"/advisories/advisory%3Af16c9745-e1c6-413e-84ce-9ae3da6ee7f0","group":{"id":"advisory:f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","revision":1,"primary_event_id":29816,"change":"published","superseded_by":[],"changed":{"id":29816,"cve_ids":["CVE-2026-109898"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-109898","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109898","aliases":["CVE-2026-109898"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-15T16:43:51.594Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-3?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T10:53:46.359957Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T16:43:51.594Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-13T16:23:02.576Z"}}},"related_cves":[{"value":"CVE-2026-109898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109898","advisory_id":"f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","event_types":["advisory"],"published_at":"2026-10-25T08:05:47.300236+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-13T16:23:02.114+00:00","detail_url":"/events/29816"},"members":[{"id":29816,"cve_ids":["CVE-2026-109898"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-109898","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-109898","aliases":["CVE-2026-109898"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-15T16:43:51.594Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-3?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T10:53:46.359957Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T16:43:51.594Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-13T16:23:02.576Z"}}},"related_cves":[{"value":"CVE-2026-109898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109898","advisory_id":"f16c9745-e1c6-413e-84ce-9ae3da6ee7f0","event_types":["advisory"],"published_at":"2026-10-25T08:05:47.300236+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-13T16:23:02.114+00:00","detail_url":"/events/29816"}]}},{"id":9218,"cve_ids":["CVE-2026-97300"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.","evidence":"cve:CVE-2026-97300","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97300","aliases":["CVE-2026-97300"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"n/a","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-06T10:41:49.035Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-2?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T10:15:17.158809Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T10:41:49.035Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-06T05:14:51.890Z"}}},"related_cves":[{"value":"CVE-2026-97300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97300","advisory_id":"af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","event_types":["advisory"],"published_at":"2026-10-24T23:13:30.358338+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T05:14:51.89+00:00","detail_url":"/advisories/advisory%3Aaf06e9ba-0aa2-4eb0-9b61-f5ec0d758257","group":{"id":"advisory:af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","revision":1,"primary_event_id":9198,"change":"published","superseded_by":[],"changed":{"id":9198,"cve_ids":["CVE-2026-97300"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.","evidence":"cve:CVE-2026-97300","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97300","aliases":["CVE-2026-97300"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"n/a","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-06T10:41:49.035Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-2?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T10:15:17.158809Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T10:41:49.035Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-06T05:14:51.890Z"}}},"related_cves":[{"value":"CVE-2026-97300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97300","advisory_id":"af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","event_types":["advisory"],"published_at":"2026-10-24T23:13:30.358338+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T05:14:51.89+00:00","detail_url":"/events/9198"},"members":[{"id":9198,"cve_ids":["CVE-2026-97300"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.","evidence":"cve:CVE-2026-97300","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-97300","aliases":["CVE-2026-97300"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"n/a","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-06T10:41:49.035Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-2?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97300","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T10:15:17.158809Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T10:41:49.035Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-06T05:14:51.890Z"}}},"related_cves":[{"value":"CVE-2026-97300","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97300","advisory_id":"af06e9ba-0aa2-4eb0-9b61-f5ec0d758257","event_types":["advisory"],"published_at":"2026-10-24T23:13:30.358338+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T05:14:51.89+00:00","detail_url":"/events/9198"}]}},{"id":8685,"cve_ids":["CVE-2026-105073"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability","summary":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-105073","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-105073","aliases":["CVE-2026-105073"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:48:32.613Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-sensitive-data-exposure-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-105073","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:48:21.743216Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:48:32.613Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:25:50.765Z"}}},"related_cves":[{"value":"CVE-2026-105073","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ecda88a9-5b25-431e-a1f3-cb54cfe903d1","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105073","advisory_id":"ecda88a9-5b25-431e-a1f3-cb54cfe903d1","event_types":["advisory"],"published_at":"2026-10-24T23:04:58.891995+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:22:42.54+00:00","detail_url":"/advisories/advisory%3Aecda88a9-5b25-431e-a1f3-cb54cfe903d1","group":{"id":"advisory:ecda88a9-5b25-431e-a1f3-cb54cfe903d1","revision":1,"primary_event_id":8674,"change":"published","superseded_by":[],"changed":{"id":8674,"cve_ids":["CVE-2026-105073"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability","summary":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-105073","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-105073","aliases":["CVE-2026-105073"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:48:32.613Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-sensitive-data-exposure-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-105073","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:48:21.743216Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:48:32.613Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:25:50.765Z"}}},"related_cves":[{"value":"CVE-2026-105073","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ecda88a9-5b25-431e-a1f3-cb54cfe903d1","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105073","advisory_id":"ecda88a9-5b25-431e-a1f3-cb54cfe903d1","event_types":["advisory"],"published_at":"2026-10-24T23:04:58.891995+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:22:42.54+00:00","detail_url":"/events/8674"},"members":[{"id":8674,"cve_ids":["CVE-2026-105073"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability","summary":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-105073","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-105073","aliases":["CVE-2026-105073"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:48:32.613Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-sensitive-data-exposure-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-105073","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:48:21.743216Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:48:32.613Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:25:50.765Z"}}},"related_cves":[{"value":"CVE-2026-105073","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ecda88a9-5b25-431e-a1f3-cb54cfe903d1","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105073","advisory_id":"ecda88a9-5b25-431e-a1f3-cb54cfe903d1","event_types":["advisory"],"published_at":"2026-10-24T23:04:58.891995+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:22:42.54+00:00","detail_url":"/events/8674"}]}},{"id":8679,"cve_ids":["CVE-2026-103684"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-103684","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-103684","aliases":["CVE-2026-103684"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:00.213Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103684","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T13:56:12.532235Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:00.213Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:26:23.646Z"}}},"related_cves":[{"value":"CVE-2026-103684","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85fc485a-d116-4f84-862d-3ea28af1a2a9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103684","advisory_id":"85fc485a-d116-4f84-862d-3ea28af1a2a9","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.255632+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:26:23.17+00:00","detail_url":"/advisories/advisory%3A85fc485a-d116-4f84-862d-3ea28af1a2a9","group":{"id":"advisory:85fc485a-d116-4f84-862d-3ea28af1a2a9","revision":1,"primary_event_id":8668,"change":"published","superseded_by":[],"changed":{"id":8668,"cve_ids":["CVE-2026-103684"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-103684","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-103684","aliases":["CVE-2026-103684"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:00.213Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103684","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T13:56:12.532235Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:00.213Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:26:23.646Z"}}},"related_cves":[{"value":"CVE-2026-103684","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85fc485a-d116-4f84-862d-3ea28af1a2a9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103684","advisory_id":"85fc485a-d116-4f84-862d-3ea28af1a2a9","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.255632+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:26:23.17+00:00","detail_url":"/events/8668"},"members":[{"id":8668,"cve_ids":["CVE-2026-103684"],"payload":{"kind":"advisory","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","summary":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","evidence":"cve:CVE-2026-103684","products":[{"name":{"value":"WP Event Solution","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-103684","aliases":["CVE-2026-103684"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Arraytics","product":"WP Event Solution","versions":[{"status":"affected","changes":[{"at":"4.1.26","status":"unaffected"}],"version":"0","versionType":"custom","lessThanOrEqual":"4.1.25"}],"packageName":"wp-event-solution","collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected"}],"modified":"2026-10-05T14:55:00.213Z","provider":"cve","references":["https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability?_s_id=cve"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-103684","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T13:56:12.532235Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T14:55:00.213Z"}}],"cna":{"orgId":"21595511-bba5-4825-b968-b78d1f9984a3","shortName":"Patchstack","dateUpdated":"2026-10-05T11:26:23.646Z"}}},"related_cves":[{"value":"CVE-2026-103684","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85fc485a-d116-4f84-862d-3ea28af1a2a9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103684","advisory_id":"85fc485a-d116-4f84-862d-3ea28af1a2a9","event_types":["advisory"],"published_at":"2026-10-24T23:04:55.255632+00:00","technologies":["core-cve","wp-event-solution"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-05T11:26:23.17+00:00","detail_url":"/events/8668"}]}}],"next_after":56321,"next_before":8679}