Read the docs

MDJM

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

MDJM records in CISA KEV

No MDJM vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-12640 CVE-2026-15017 · GHSA-wwx3-3qmm-8rch

Improper privilege management in MDJM Event Management

Priority MEDIUM 41

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00699 Published 2026-07-23 No fix listed CWE-269
TI-2025-32874 CVE-2025-52824 · GHSA-h8g3-h72f-598r

WordPress Mobile DJ Manager plugin <= 1.7.8.3 - Privilege Escalation vulnerability

Priority MEDIUM 40

Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile DJ Manager: from n/a through <= 1.7.8.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00324 Published 2025-06-27 No fix listed CWE-862
TI-2026-06626 CVE-2026-7537 · GHSA-9q5q-7m8w-wgxm

Unrestricted file upload in MDJM Event Management

Priority LOW 35

The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00659 Published 2026-06-06 No fix listed CWE-434
TI-2025-16596 CVE-2025-22714 · GHSA-p435-hvh7-vgm3

WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-24 No fix listed CWE-79
TI-2026-01335 CVE-2026-1650 · GHSA-g7fr-rm9c-829x

MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

Priority LOW 30

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' function in all versions up to, and including, 1.7.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00298 Published 2026-03-07 No fix listed CWE-862
Open these records in search →