cleantalk
Vulnerabilities and Security Researches

Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin, CVE-2026-23549

CVE, Research URL

CVE-2026-23549

Published on
Feb 19, 2026
Research Description
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through <= 5.1.1.
Affected versions
max 5.1.1.
Status
vulnerable