What’s Vulnerable › Products

MDJM Event Management vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your MDJM Event Management version is affected

Latest MDJM Event Management vulnerabilities

• CVE-2026-15017 — MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers (CVSS 8.8)
• CVE-2026-7537 — MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter (CVSS 7.2)
• CVE-2026-1650 — MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion (CVSS 5.3)