CVE-2026-88801 - MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
CVE ID :CVE-2026-88801 Published : Nov. 6, 2026, 8:17 a.m. | 52 minutes ago Description :The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check a capability or a nonce before creating a WordPress role from a name supplied in the request, and store...