Vulnerabilities

TI-2026-22528 CVE-2026-28189 · GHSA-ggcw-rwmj-9238

WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability

LOW 33

Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00426 Published 2026-08-13 No fix listed CWE-22

TI-2026-42518 CVE-2026-59555 · GHSA-qghf-ghh2-vwvg

MEDIUM 50

Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00605 Published 2026-07-23 No fix listed CWE-22

TI-2026-42488 CVE-2026-59525 · GHSA-chgx-4rph-2pm7

MEDIUM 46

Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-07-23 No fix listed CWE-89

TI-2026-21836 CVE-2026-27423 · GHSA-r27m-w6r8-wgrx

LOW 20

Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-07-23 No fix listed CWE-862