{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amageeventpresswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mage:eventpress:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-109381"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Eventpress (\u003c= 5.7.8)"],"_cs_severities":["high"],"_cs_tags":["wordpress","privilege-escalation","webserver"],"_cs_type":"advisory","_cs_vendors":["Mage"],"content_html":"\u003cp\u003eThe Mage Eventpress plugin for WordPress (versions 5.7.8 and earlier) contains a flaw in the \u003ccode\u003emep_grant_shop_manager_access()\u003c/code\u003e function. This function hooks into \u003ccode\u003euser_has_cap\u003c/code\u003e and unconditionally grants the \u003ccode\u003emanage_options\u003c/code\u003e capability to users when a request parameter (specifically \u003ccode\u003e$_GET['page']\u003c/code\u003e) begins with 'mep_' or 'mpwem_'. Because this parameter is not validated against registered plugin screens, authenticated users with Shop Manager-level access can elevate their privileges to Administrator by appending malicious parameters to administrative URL paths.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated attackers with Shop Manager privileges to achieve full Administrator access, resulting in complete control over the WordPress instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Mage Eventpress plugin to the latest patched version immediately.\u003c/li\u003e\n\u003cli\u003eAudit existing administrator accounts for unauthorized additions or modifications if the plugin was installed during the period of exposure.\u003c/li\u003e\n\u003cli\u003eImplement access control monitoring for administrative role assignments within the WordPress environment.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T08:27:05Z","date_published":"2026-10-28T08:27:05Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mage-eventpress-priv-esc/","summary":"The Mage Eventpress WordPress plugin is vulnerable to privilege escalation in versions 5.7.8 and earlier due to improper request parameter validation in the mep_grant_shop_manager_access function.","title":"Mage Eventpress: Privilege escalation via mep_grant_shop_manager_access (CVE-2026-109381)","url":"https://feed.craftedsignal.io/briefs/2026-10-mage-eventpress-priv-esc/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mage:eventpress:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}