Skip to content
Threat Feed
Subscribe

Product

Events Manager (7.1.0 - 7.4.0.x)

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in Events Manager Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-18366) in the Events Manager WordPress plugin allows attackers to compromise user accounts and escalate privileges via REST API exploitation.

Events Manager
1r 2t 1c