Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-27398 EUVD-2026-31756GHSA-ffph-c23r-mr7q

WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Vendor: WP Chill Product: RSVP and Event Management

Description

Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects RSVP and Event Management: from n/a through 2.7.16.

Affected products

VendorProductAffectedFixed
WP Chill RSVP and Event Management ≤ 2.7.16 —

References