https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T07:57:47.849338+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86795 CVE-2026-86795 — Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list 2026-11-07T07:57:47.850584+00:00

Affected: Unknown Community Events

The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions, allowing unauthenticated users to retrieve details of event submissions awaiting moderation, which are not available anywhere on the public site.