https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:13:17 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-93662 <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> https://db.gcve.eu/vuln/fkie_cve-2026-93662 https://db.gcve.eu/vuln/ghsa-wvr6-m4wg-qf6q <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> <p>The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts&#39; unpublished, pending or trashed event and venue content, including full street addresses.</p> https://db.gcve.eu/vuln/ghsa-wvr6-m4wg-qf6q