Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mage:eventpress:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Mage Eventpress: Privilege escalation via mep_grant_shop_manager_access (CVE-2026-109381)

The Mage Eventpress WordPress plugin is vulnerable to privilege escalation in versions 5.7.8 and earlier due to improper request parameter validation in the mep_grant_shop_manager_access function.

Eventpress wordpress privilege-escalation webserver
1r 1t 1c