Event Espresso 4 Decaf – Event Registration Event Ticketing, CVE-2025-68007
- CVE, Research URL
- Home page URL
-
Security reports for Event Espresso 4 Decaf – Event Registration Event Ticketing
- Published on
- Jan 22, 2026
- Research Description
- Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through <= 5.0.37.decaf.
- Affected versions
-
max 5.0.37.
- Status
-
vulnerable