Description
CVE-2026-40776 Eventin wp-event-solution Broken Access Control Unauthenticated PII disclosure and order forgery in the Eventin WordPress plugin 10,000+ active installs. A public REST endpoint hands out a wprest nonce to any visitor, and three...
Basic Information
ID
96815085-6343-5073-B430-4B3BEF6D21BD
Published
May 6, 2026 at 20:51
Modified
May 6, 2026 at 20:52