Threats tagged 'ghsa-g5q3-jjf3-h8h5'

CVE-2026-66451 is an authentication bypass vulnerability affecting WP Event SOlution versions up to and including 4.1.9. This flaw allows unauthenticated attackers to bypass authentication mechanisms, potentially leading to limited confidentiality and integrity impacts. The vulnerability is classified under CWE-288, indicating broken authentication via an alternate path or channel. The CVSS 3.1 base score is 6.5, reflecting a medium severity level. No official patch or remediation guidance has been provided by the vendor as of the publication date. There are no known exploits in the wild at this time.