Sensitive Data Exposure in WP Chill RSVP and Event Management Plugin

CVE-2026-39536

What is CVE-2026-39536?

A weakness has been identified in the WP Chill RSVP and Event Management plugin, which could allow unauthorized access to sensitive system information. This vulnerability enables an attacker to retrieve embedded sensitive data, potentially compromising the confidentiality of the affected system. The issue impacts versions up to and including 2.7.16, highlighting the importance for users to update their installations to safeguard against potential exploitation.

References