Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Community Events CVE-2026-86795
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions, allowing unauthenticated users to ret
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Community Events CVE-2026-86794
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape sev
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit