Skip to content
OpenAdvisories

Vendor

mdjm

6 known vulnerabilities.

Products

MDJM Event Management 3 Mobile DJ Manager 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-7537 Public exploit

    MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter

    The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type validation being performed on uploa…

    mdjm MDJM Event Management Web / CMS