community_events vulnerabilities
CVEs whose affected-version data names the community_events package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86795Medium· 5.3Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions, allowing unauthenticated users to retrieve details of event submissions awaiting moderation, which are not availab…
▾ SunlitEPSS 0.14%via CVEORG
CVE-2026-86794High· 8.8Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape several of the submitted values before outputting them in the administration das…
▾ TwilightEPSS 0.28%via CVEORG