Skip to content
Noroxi

MDJM Event Management

mobile-dj-manager · plugin

Known security vulnerabilities for MDJM Event Management. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

1 with public exploit code · latest Jul 23, 2026

Vulnerabilities

  • CVE-2026-15017

    MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers

    High 8.8

  • CVE-2025-52824

    WordPress Mobile DJ Manager plugin <= 1.7.8.3 - Privilege Escalation vulnerability

    High 8.8

  • CVE-2025-31074

    WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability

    High 8.8

  • CVE-2026-7537

    MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter

    High 7.2

  • CVE-2025-22714

    WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-1650

    MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

    Medium 5.3

← Back to directory