Unknown Wp Events Manager vulnerabilities

• thimpress wp events manager WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR CVE-2026-15148 5.3 MediumAugust 7, 2026
• thimpress wp events manager WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter CVE-2026-14205 9.8 CriticalAugust 7, 2026