CVE-2026-82223: CWE-862 Missing Authorization in Arraytics WP Event SOlution

This vulnerability in WP Event SOlution (<= 4.1.22) is due to missing authorization checks, enabling unauthenticated attackers to bypass access controls. The CVSS 3.1 score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are low and high respectively. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.

An attacker can exploit this vulnerability remotely without authentication to perform unauthorized actions that may alter data integrity and availability of the affected system. Confidentiality is not impacted. The vulnerability could lead to service disruption or unauthorized modifications within the WP Event SOlution plugin environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected plugin and monitor for unusual activity related to WP Event SOlution. Avoid exposing the plugin to untrusted networks where possible.