Missing Authorization Flaw in WpEvently Plugin by MagePeople Team

CVE-2025-54705

What is CVE-2025-54705?

The WpEvently plugin, developed by the MagePeople Team, contains a missing authorization vulnerability that allows attackers to exploit improperly configured access control security levels. This issue compromises the integrity of user data and system security, allowing unauthorized access to sensitive functions within the affected versions of the plugin. Proper measures should be taken to configure access settings correctly and to identify whether the system is affected.

References