Skip to contentMdjm Event Management vulnerabilities
- mdjm event management, unknown mdjm event management, mobile events manager +2 moreMDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role CreationCVE-2026-888018.0 High
- mdjm event management, unknown mdjm event management, mobile events manager +2 moreMDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role DeletionCVE-2026-888009.1 Critical
- mdjm event management, unknown mdjm event management, mobile events manager +2 moreMDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDORCVE-2026-887998.8 High
- mdjm event management, unknown mdjm event management, mobile events manager +2 moreMDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post DeletionCVE-2026-888027.5 High
- mdjm event managementMDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' HandlersCVE-2026-150178.8 High
- mdjm event managementMDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' ParameterCVE-2026-7537Public exploit7.2 High
- mdjm event managementMDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field DeletionCVE-2026-16505.3 Medium