Skip to content
Threat Feed
Subscribe

Product

MDJM Event Management Plugin (<= 1.7.8.3)

1 brief RSS
high advisory

Arbitrary File Upload in MDJM Event Management Plugin for WordPress (CVE-2026-7537)

Authenticated attackers with administrator-level privileges can exploit an arbitrary file upload vulnerability (CVE-2026-7537) in the MDJM Event Management plugin for WordPress (versions <= 1.7.8.3) via the `mdjm_send_comm_email` function due to lack of file validation, enabling remote code execution.

PoC MDJM Event Management plugin wordpress plugin rce file-upload cve webserver
2r 2t 1c updated