CVE-2026-86795
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 05, 2026
Vendor
unknown
Description
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions, allowing unauthenticated users to retrieve details of event submissions awaiting moderation, which are not available anywhere on the public site.