CVE-2026-1649 | Community Events Plugin up to 1.5.7 on WordPress ce_venue_name cross site scripting

Full Article URL: https://vuldb.com/?id.346446
Textarea URL (this page): <a href="https://textarea.nl/i/eNrLKCkpKLbS1y8rzUlJ0kvOz9W3z0zRMzYxMzExAwCQRwj6_2026-02-18">https://textarea.nl/i/eNrLKCkpKLbS1y8rzUlJ0kvOz9W3z0zRMzYxMzExAwCQRwj6_2026-02-18
Source: https://vuldb.com/?rss.recent
Vuldb: https://vuldb.com
Publication date: 2026-02-18 07:08:50
Last retrieval: 2026-02-18 06:46:15.301114

07:08 - 18 Feb 2026

vuldb.com

A vulnerability, which was classified as problematic, has been found in Community Events Plugin up to 1.5.7 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument ce_venue_name leads to cross site scripting. This vulnerability is referenced as CVE-2026-1649. Remote exploitation of the attack is possible. No exploit is available.

https://vuldb.com/?id.346446

Article info: