Security Advisory

CVE-2026-13169

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 06:00:14

Last updated 2026-08-19 12:54:29

Assigner WPScan

CVSS score 8.1

State PUBLISHED

Description

The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including administrators.

← Browse all CVEs View on cve.org ↗