PT-2026-25201 · Magepeople Team · Wpevently

Bao · Publicado 2026-03-13 · Atualizado 2026-03-15 · CVE-2026-32354

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WpEvently versions prior to 5.1.9

Description A flaw exists in magepeopleteam WpEvently mage-eventpress that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data.

Recommendations Update WpEvently to version 5.1.9 or later.

Correção

Enumeração de Fraquezas

CWE-201

Identificadores relacionados

CVE-2026-32354

Produtos afetados

Wpevently

Referências · 3

• https://twitter.com/CVEnew/status/2032998270612431264 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-5-1-9-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32354 · Nota de Segurança