Known vulnerabilities in MDJM Event Management

MDJM Event Management automates event processes, streamlining from enquiries to completion. Add employees, clients, and create events seamlessly.

6Reported vulnerabilities

8.8Highest CVSS score

1.7.8.5Latest version

50+Active installs

What to do now

Update MDJM Event Management to 1.7.8.5 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 18, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-15017	High 8.8	0.4%	0 to 1.7.8.4 (inclusive)	`1.7.8.5`	July 23, 2026
CVE-2025-52824	High 8.8	0.3%	1.7.6 and earlier	—	June 23, 2025
CVE-2025-31074	High 8.8	0.7%	1.7.5.2 and earlier	`1.7.5.3`	March 28, 2025
CVE-2026-7537	High 7.2	0.7%	0 to 1.7.8.3 (inclusive)	`1.7.8.4`	June 6, 2026
CVE-2025-22714	Medium 6.1	0.3%	1.7.5.6 and earlier	`1.7.6`	January 15, 2025
CVE-2026-1650	Medium 5.3	0.3%	0 to 1.7.8.1 (inclusive)	`1.7.8.2`	March 7, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.