CVE-2026-114192: Missing Authorization in Magepeople inc. WpEvently
Affects Magepeople inc. WpEventlySource CVE Database V5
Not known to be exploited · CVSS 6.5 Medium : update Magepeople inc. WpEvently when convenient.
Data as of 10/24/2026, 16:08:18 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Magepeople inc.WpEvently | Affected
| Fixed in– |
AI-suggested
Until a fix is available, review and tighten access control configurations in WpEvently to mitigate unauthorized access risks.
Description
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.
Impact
Exploitation of this vulnerability could allow an unauthenticated attacker to access or modify data that should be restricted by access control policies. The impact is limited to confidentiality and integrity loss without affecting availability. There are no known exploits in the wild at this time.