Threat intelligence dashboard
CVE-2026-82214Unrated

Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download

The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.

Risk score

—

CVSS unavailable

Vendor
Not available
Product
Quick Event Manager
CWE
CWE-200
Published
Oct 31, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Quick Event Manager

Version / rangeStatusType
8.4.6 to before 9.19affectedsemver

Technical metrics

No CVSS metrics were provided.