Skip to content
Threat Feed
Subscribe

Vendor

MDJM

1 brief RSS
high advisory

WordPress MDJM Event Management Plugin Privilege Escalation (CVE-2026-15017)

An unauthenticated privilege escalation vulnerability (CVE-2026-15017) in the MDJM Event Management plugin for WordPress, affecting all versions up to 1.7.8.4, allows attackers to grant arbitrary MDJM capabilities to any registered WordPress role due to missing capability checks and nonce verification, ultimately enabling a low-privilege user to escalate to Administrator.

MDJM Event Management plugin <= 1.7.8.4 +1 wordpress plugin privilege-escalation cve web-application
2t 1c