medium5.3
CVE-2026-82214
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar e…
Impact
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fullworks | Quick Event Manager | from 8.4.6 before 9.19 |