Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: MDJM Clear all filters
TI-2026-12640 CVE-2026-15017 · GHSA-wwx3-3qmm-8rch

Improper privilege management in MDJM Event Management

Priority MEDIUM 41

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00699 Published 2026-07-23 No fix listed CWE-269
TI-2026-06626 CVE-2026-7537 · GHSA-9q5q-7m8w-wgxm

Unrestricted file upload in MDJM Event Management

Priority LOW 35

The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00659 Published 2026-06-06 No fix listed CWE-434
TI-2026-01335 CVE-2026-1650 · GHSA-g7fr-rm9c-829x

MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

Priority LOW 30

The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' function in all versions up to, and including, 1.7.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00298 Published 2026-03-07 No fix listed CWE-862
TI-2025-32874 CVE-2025-52824 · GHSA-h8g3-h72f-598r

WordPress Mobile DJ Manager plugin <= 1.7.8.3 - Privilege Escalation vulnerability

Priority MEDIUM 40

Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile DJ Manager: from n/a through <= 1.7.8.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00324 Published 2025-06-27 No fix listed CWE-862
TI-2025-16596 CVE-2025-22714 · GHSA-p435-hvh7-vgm3

WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-24 No fix listed CWE-79