CVE-2026-66451: falha de média gravidade em Arraytics WP Event SOlution
WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Arraytics · WP Event SOlutionCVEs relacionadas — Arraytics WP Event SOlution
No mesmo produto, das mais perigosas para as menos.
CVE-2026-40776HIGHWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-28174MEDIUMWordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2026-82223MEDIUMWordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-28173HIGHWordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityEPSS 0.3%