Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:mdjm_event_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductMdjm Event Management (b36bf3c6-5d3d-5088-a8b5-21e0f4fcc7f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88802 vulnerable 2026-09-16 04:34:09.171020 MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
HIGH (7.5)
The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing unauthenticated attackers to destroy arbitrary posts, pages and media attachments, bypassing the trash.
Published: 2026-09-13T20:06:37.230Z
Updated: 2026-09-14T12:38:51.859Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.