CVE WATCH / VULNERABILITY DETAIL
CVE-2026-107616
HIGHCVSS 7.5NVD feed
Published 7 November 2026 · tracked since 8 November 2026
Description
The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due to a missing authorization check on the GetEventAttendeesCommandHandler::handle() function in versions up to, and including, 9.9.1. The handler only enforces the broad `amelia_read_events` capability — which th
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124318 HIGH 7.2
- CVE-2026-122041 CRITICAL 9.1
- CVE-2026-120841 HIGH 8.8
- CVE-2026-120839 HIGH 8.8
- CVE-2026-119156 HIGH 7.2
- CVE-2026-93766 HIGH 7.2
- CVE-2026-93755 HIGH 7.2
- CVE-2026-93429 HIGH 7.2
- CVE-2026-123418 HIGH 7.2
- CVE-2026-122231 HIGH 7.2