CVE-2026-16064 in Event Booking Manager Plugininformación

Resumen

por MITRE • 2026-08-02

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checking a global capability, allowing users with the Contributor role and above to modify the title and publication status of arbitrary posts and pages on the site, including content they do not own.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-07-17

Divulgación

2026-08-02

Moderación

aceptado

Artículo

VDB-385325

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-16064
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-16064
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-16064/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!