https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T20:21:35.448540+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-93661 CVE-2026-93661 — Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR 2026-09-28T20:21:35.457598+00:00

Affected: Unknown Events Manager

The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers of the ticket it was authorized against, letting a user who can manage one event's tickets overwrite and reassign any ticket on the site to their own event.