CVE-2026-82214
Unknown
Last modified
CVE-2026-82214 is a vulnerability of currently unknown severity. The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts..
Description
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Quick Event Manager | >= 8.4.6, < 9.19 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-82214?
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
How severe is CVE-2026-82214?
Severity scoring for CVE-2026-82214 is pending analysis.
How do I fix CVE-2026-82214?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-82209When libpsl support is enabled, libcurl fails to enforce the…8.2
- CVE-2026-8221A flaw has been found in Devs Palace ERP Online up to 4.0.0.…2.4
- CVE-2026-82210Enforceable assertion in the streaming feature of Apache bRP…7.5
- CVE-2026-82211The Nexi XPay Build WordPress plugin through 7.6.2 does not …8.2
- CVE-2026-82212The Nexi XPay Build WordPress plugin through 7.6.2 does not …7.5
- CVE-2026-82213The Nexi XPay Build WordPress plugin from 7.6.1 to 7.6.2 doe…5.3
- CVE-2026-82215The Payment Gateway PayPay for WooCommerce WordPress plugin …5.9
- CVE-2026-82217In Eclipse Theia versions 1.73.0 up to but not including 1.7…8.8
- CVE-2026-8222A vulnerability has been found in Open5GS up to 2.7.7. Affec…7.5
- CVE-2026-82220Unauthenticated Other Vulnerability Type in Forminator <= 1.…5.3
- CVE-2026-82221Unauthenticated Cross Site Scripting (XSS) in RegistrationMa…7.1
- CVE-2026-82222Deserialization of Untrusted Data vulnerability in Liquid We…10
Are you affected by CVE-2026-82214?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST