Live › vulnerability › CVE-2026-114192
Go to dashboardWpEvently (mage-eventpress), a WordPress event plugin by Magepeople, has a missing authorization check, so requests can reach functions that should be restricted. The sources say an attacker can exploit incorrectly configured access control, affecting versions through 5.7.8.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 14:48 UTC. All times on this page are UTC.
Sites running WpEvently (mage-eventpress) version 5.7.8 or earlier are in the affected range according to the sources. The sources do not describe which data paths or roles are exposed, so unknown beyond the plugin version.
No product ranges from the sources yet.
wp plugin get mage-eventpress --field=version5.7.8, if the vendor has released one; the sources do not name a fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.
This page as .md · .json · in your agent: get_signal("CVE-2026-114192")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.