Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:03:40 +0000 CVE-2026-93662 — Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter https://vulnerability.circl.lu/vuln/cve-2026-93662 <p><strong>Affected:</strong> Unknown Events Manager</p> <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> <p><strong>Affected:</strong> Unknown Events Manager</p> <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> https://vulnerability.circl.lu/vuln/cve-2026-93662