Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-13176 2 Eventin, Wordpress 2 Eventin, Wordpress 2026-08-21 2.7 Low
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level access and above to trigger blind server-side requests to arbitrary hosts.