Live › vulnerability › CVE-2026-110380
Go to dashboardWP Event Solution, a WordPress event plugin by Arraytics, has a missing authorization check in versions through 4.1.26. An attacker may reach functions that should be restricted to privileged users.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running WP Event Solution at version 4.1.26 or earlier are in scope. The sources do not say which functions lack the check or whether an account is needed, so sites with the plugin installed should treat themselves as potentially exposed. Sites without the plugin can skip it.
No product ranges from the sources yet.
wp plugin get wp-event-solution --field=version4.1.26Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26.
This page as .md · .json · in your agent: get_signal("CVE-2026-110380")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.