Skip to content
Mdjm vulnerabilities
Newest
-
mdjm event management, unknown mdjm event management, mobile events manager +2 more
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
CVE-2026-88801
8.0 High
-
mdjm event management, unknown mdjm event management, mobile events manager +2 more
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
CVE-2026-88800
9.1 Critical
-
mdjm event management, unknown mdjm event management, mobile events manager +2 more
MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
CVE-2026-88799
8.8 High
-
mdjm event management, unknown mdjm event management, mobile events manager +2 more
MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
CVE-2026-88802
7.5 High
-
mdjm event management
MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers
CVE-2026-15017
8.8 High
-
mdjm event management
MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter
CVE-2026-7537
Public exploit
7.2 High
-
mdjm event management
MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion
CVE-2026-1650
5.3 Medium
-
mdjm mobile dj manager
WordPress Mobile DJ Manager plugin <= 1.7.8.3 - Privilege Escalation vulnerability
CVE-2025-52824
8.8 High
-
mdjm mobile dj manager
WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability
CVE-2025-31074
8.8 High
-
mdjm mobile dj manager
WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-22714
7.1 High