Authorization Bypass Vulnerability in NOUS Ouvert Utile et Simple Event Post Plugin
CVE-2026-107427

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Event Post
Vendor
CVE Published:
12 October 2026

What is CVE-2026-107427?

The NOUS Ouvert Utile et Simple Event post plugin has been found to have an authorization bypass vulnerability, enabling attackers to exploit improperly configured access controls. This could potentially allow unauthorized users to access or manipulate data they should not be able to, threatening the security and integrity of the WordPress site. Users are strongly advised to update to the latest version and review security settings to mitigate any risks associated with this flaw.

Affected Version(s)

Event post 0 <= 6.1.1

References

https://patchstack.com/database/wordpress/plugin/event-po...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

genisis-lab | Patchstack Bug Bounty Program
.