CVE-2026-45441 is an unauthenticated vulnerability in WpEvently versions <= 5.3.3 caused by improper validation of specified quantity in input (CWE-1284). This flaw allows an attacker to manipulate input quantities in a way that compromises data integrity without requiring any privileges or user interaction. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but high integrity impact. There is no vendor advisory or patch available as of the published date.

The vulnerability allows unauthenticated attackers to cause a high integrity impact by exploiting improper input validation related to quantity specification. This could lead to unauthorized modification or corruption of data within the affected WpEvently plugin. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Magepeople inc.'s communications for updates. Until a patch is available, consider restricting access to the vulnerable plugin functionality or disabling the plugin if feasible to reduce exposure.