High · 7.5 CVE-2026-84847 EUVD-2026-70567GHSA-m275-m478-ffm6

WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

Published Sep 3, 2026 · Updated Sep 5, 2026 · Assigned by Patchstack

Vendor: brightvesseldev Product: Quick Event Manager

Description

Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.

Affected products

Vendor	Product	Affected	Fixed
brightvesseldev	Quick Event Manager	≤ 9.17	—

References

https://patchstack.com/database/wordpress/plugin/quick-event-manager/vulnerability/wordpress-quick-event-manager-plugin-9-17-broken-access-control-vulnerability?_s_id=cve vdb-entry