CVE-2026-82214
Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
| Vendor | unknown |
| Product | quick event manager |
| Published | Oct 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown quick event manager
Be the first to know when new unknown vulnerabilities affecting unknown quick event manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Quick Event Manager
8.4.6 < 9.19
References
Credits
Shikhali Jamalzade WPScan