mage-eventpress vulnerabilities
CVEs whose affected-version data names the mage-eventpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-116394Medium· 5.3WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9.
▾ SunlitMagepeople inc. · mage-eventpressEPSS 0.30%via CVEORG
CVE-2026-114192Medium· 6.5WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.
▾ SunlitMagepeople inc. · mage-eventpressEPSS 0.22%via CVEORG
CVE-2026-81802Medium· 6.5Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
Unauthenticated Insecure Direct Object References (IDOR) in WpEvently <= 5.6.0 versions.
▾ SunlitMagepeople inc. · mage-eventpressEPSS 0.33%via NVD