Back to the CVE list

CVE-2026-15023

Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action

CVSS score

6.5

EPSS probability

%0.5

Risk score

0.0

Published

1 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

6.6

CVE-2026-14280Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys

Vendornetweblogic ProductEvents Manager – Calendar, Bookings, Tickets, and more!

Patch status unknownEPSS %11 mo ago

5.3

CVE-2026-10627Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters

Vendornetweblogic ProductEvents Manager – Calendar, Bookings, Tickets, and more!

Patch status unknownEPSS %01 mo ago

6.1

CVE-2026-17089Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter

Vendornetweblogic ProductEvents Manager – Calendar, Bookings, Tickets, and more!

Patch status unknown Public Exploits:1EPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-15023"