CVE-2026-81802: Magepeople inc. WpEvently, заобикаляне на вход и права

Описание

Оригинално описание

Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.

Засегнати продукти

• Magepeople inc. WpEvently: n/a до 5.6.0

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key

История

Други уязвимости в Magepeople inc. WpEvently

• 5.3CVE-2026-116394
• 6.5CVE-2026-114192
• 4.3CVE-2026-81761
• 5.4CVE-2026-81759
• 7.5CVE-2026-45441

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-81802
• https://nvd.nist.gov/vuln/detail/CVE-2026-81802
• https://patchstack.com/database/wordpress/plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-6-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve