Cpe:2.3:a:wp-Event-Manager:events_manager:7.1.0:*:*:*:*:wordpress:*:*

An unauthenticated privilege escalation vulnerability (CVE-2026-18366) in the Events Manager WordPress plugin allows attackers to compromise user accounts and escalate privileges via REST API exploitation.