Threats tagged 'ghsa-jr8r-6xgg-xqr4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.6	EPSS 0.4%	CVE-2026-84898Eventin (WordPress plugin) · Path Traversal Medium6.6EPSS 0.4%2026-09-05CVE Database V5CVE-2026-84898 The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files. EPSS 0.4%Vulnerability CWE-22 #ghsa-jr8r-6xgg-xqr4	CVE Database V5	2026-09-05

Page 1 of 1