CVE-2026-28174
Received Received - Intake

BaseFortify

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Patchstack

Description
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-28174
EUVD
EUVD-2026-57957

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack wp_event_solution to 4.1.18 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-201 The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-28174 is a Sensitive Data Exposure vulnerability in the WP Event Solution WordPress plugin versions 4.1.18 and below. It allows unauthorized users to access confidential information that should be restricted to regular users.

Detection Guidance

Check if the WP Event Solution plugin is installed and its version is 4.1.18 or below. Look for unauthorized access to sensitive data in logs or unusual user activity.

Impact Analysis

This vulnerability could allow attackers to view sensitive data, potentially leading to data breaches. The impact includes exposure of confidential information, which may be exploited in mass campaigns targeting multiple websites.

Mitigation Strategies

Update the WP Event Solution plugin to version 4.1.19 or later. If updating is not possible, apply Patchstack's mitigation rule or contact your hosting provider for assistance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-28174. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart