CVE-2026-88802 - MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
Brief
CVE ID : CVE-2026-88802
Published : Sept. 13, 2026, 8:06 p. m.
- 46 minutes ago
Description : The MDJM Event Management WordPress plugin before 1.
- 8. 5 and the Mobile Events Manager WordPress plugin through 1.
- 8. 3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing unauthenticated attackers to destroy arbitrary posts, pages and media attachments, bypassing the trash.
Severity: 0.0
- NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...