CVE-2026-57713

HIGH

Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.

StatusDeferred

설명

Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.

Score Summary

CVSS Score: 8.8
Version: 3.1
VPI: 88
Why this VPI (explainable, experimental)
VPI breakdown
Impact 88.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 88.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 23.8%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 07/13/2026(8 days ago)
Modified: 07/13/2026(7 days ago)
Source: NVD

CWE Weakness Classification

CWE-502
NVD
Secondary

References (1)

NVD
https://patchstack.com/database/Wordpress/Plugin/events-manager/vulnerability/wordpress-events-manager-plugin-7-3-6-php-object-injection-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	88.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	88.00