CVE-2026-105073
Received Received - Intake

Exposure of Sensitive Information in WP Event Solution

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Patchstack

Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-105073
EUVD
EUVD-2026-92422

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Arraytics WP Event Solution 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-105073 is a vulnerability in the Arraytics WP Event Solution plugin for WordPress. It allows unauthorized parties to access sensitive data such as passwords, emails, or payment details due to improper handling of information. The issue affects versions up to 4.1.25.

Detection Guidance

Check the installed version of the WP Event Solution plugin. If it is 4.1.25 or below, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin directory for version details.

Impact Analysis

This vulnerability could allow attackers to steal private information like passwords or payment details if the plugin is not updated. It may lead to data breaches, financial loss, or identity theft for users of affected websites.

Compliance Impact

Exposure of sensitive data could violate GDPR and HIPAA requirements, leading to legal penalties, fines, or reputational damage due to unauthorized access to personal or health information.

Mitigation Strategies

Update the WP Event Solution plugin to version 4.1.26 or later immediately. If updating is not possible, seek help from a hosting provider or web developer to apply necessary fixes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105073. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart