CVE-2026-81802

WpEvently versions up to 5.6.0 are susceptible to unauthenticated Insecure Direct Object References (IDOR), allowing attackers to access sensitive data or perform unauthorized actions by manipulating object identifiers. This vulnerability poses a medium risk, particularly for organizations using this plugin in their WordPress installations. Users of WpEvently should prioritize patching or upgrading to mitigate potential data exposure and unauthorized access.