CVE-2026-13176 | Eventin Plugin up to 4.1.20 on WordPress server-side request forgery

August 21, 2026 Yanac

A vulnerability labeled as critical has been found in Eventin Plugin up to 4.1.20 on WordPress. Affected is an unknown function. Executing a manipulation can lead to server-side request forgery.

This vulnerability is handled as CVE-2026-13176. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More