Description
CVE-2026-40776 — Eventin wp-event-solution Broken Access Control Unauthenticated PII disclosure and order forgery in the Eventin WordPress plugin 10,000+ active installs. A public REST endpoint hands out a wprest nonce to any visitor, and three...
Basic Information
ID
445C517A-FBD0-5894-80F1-5C6758783847
Published
May 3, 2026 at 21:47