mdjm vulnerabilities
6 published CVEs name mdjm among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15017
MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers
mdjm · MDJM Event Management
High8.8 - CVE-2026-7537
MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter
mdjm · MDJM Event Management
High7.2 - CVE-2026-1650
MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion
mdjm · MDJM Event Management
Medium5.3 - CVE-2025-52824
WordPress Mobile DJ Manager plugin <= 1.7.8.3 - Privilege Escalation vulnerability
MDJM · Mobile DJ Manager
High8.8 - CVE-2025-31074
WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability
MDJM · Mobile DJ Manager
High8.8 - CVE-2025-22714
WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability
MDJM · Mobile DJ Manager
High7.1