CVE intelligence

CVE-2026-84898

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowin

Published 2026-09-05 · CVSS 6.6

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

NIST record