Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the get_item_permissions_check() function in all versions up to, and including, 4.1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary order data including customer PII (name, email, phone) by iterating order IDs.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-14 | 2 | General2 |
| 2026-06-06 | 1 | Active Exploitation1 |
| 2026-06-07 | 1 | Active Exploitation1 |
| 2026-06-08 | 1 | Active Exploitation1 |
| 2026-06-10 | 1 | Active Exploitation1 |
| 2026-06-14 | 1 | Active Exploitation1 |
| 2026-06-24 | 1 | Active Exploitation1 |
| 2026-06-30 | 1 | Active Exploitation1 |
| 2026-07-12 | 1 | Active Exploitation1 |
| 2026-09-02 | 1 | Active Exploitation1 |
| 2026-09-28 | 1 | Active Exploitation1 |
🚨 Alerta: Explotación activa de vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
Alert reports active exploitation of Microsoft Defender CVE-2026-4109 and CVE-2026-45498, but does not provide PoC, exploit code, patches, or detailed technical information.
🚨 Alerta: Explotación activa de vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The tweet announces that CVE‑2026‑4109 and CVE‑2026‑45498 are being actively exploited in Microsoft Defender, but provides no technical details, PoC, or patch information.
🚨 Alerta: Explotación activa de #vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The tweet warns of active exploitation of critical Microsoft Defender vulnerabilities (CVE-2026-4109, CVE-2026-45498) and directs readers to a news source.
🚨 Alerta: Explotación activa de vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The text reports that critical vulnerabilities in Microsoft Defender (CVE-2026-4109 and CVE-2026-45498) are being actively exploited, but no additional technical or mitigation details are provided.
🚨 Alerta: Explotación activa de vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The snippet alerts readers to active exploitation of critical Microsoft Defender vulnerabilities CVE-2026-4109 and CVE-2026-45498, but does not provide PoC, exploit code, patch details, or technical specifics.
🚨 #Alerta: Explotación activa de #vulnerabilidades críticas en Microsoft #Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The post alerts that CVE-2026-4109 and CVE-2026-45498 are actively exploited against Microsoft Defender, as reported by a news article.
🚨 #Alerta: Explotación activa de #vulnerabilidades críticas en #MicrosoftDefender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The post alerts to active exploitation of CVE-2026-4109 and CVE-2026-45498 in Microsoft Defender, though it offers no technical details or patch information.
🚨 Alerta: Explotación activa de #vulnerabilidades críticas en Microsoft Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The message alerts that Microsoft Defender is being actively exploited with CVE‑2026‑4109 and CVE‑2026‑45498, but does not provide exploit code, patches, or technical details.
🚨 Alerta: #Explotación activa de #vulnerabilidades críticas en Microsoft #Defender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
An alert warns that Microsoft Defender is actively exploited through CVE-2026-4109 and CVE-2026-45498, but no patches or technical details are provided.
🚨 #Alerta: Explotación activa de #vulnerabilidades críticas en #MicrosoftDefender | CVE-2026-4109 | CVE-2026-45498 | https://www.newstecnicas.com/2026/06/alerta-explotacion-activa-de.html
Post summary
The post alerts that CVE-2026-4109 and CVE-2026-45498 are being actively exploited against Microsoft Defender, with no PoC, exploit code, or mitigation details included.
CVE-2026-4109 Unauthorized Data Access in Eventin WordPress Plugin via Improper Capability Check https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4109
Post summary
The tweet offers a brief headline and a link to a vulnerability detail page, providing minimal technical context but lacking evidence of exploitation, patches, or a PoC.
CVE-2026-4109 The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper cap… https://www.cve.org/CVERecord?id=CVE-2026-4109
Post summary
The CVE describes a data‑access vulnerability in the Eventin WordPress plugin, but no exploit details, PoC, patch or active exploitation are provided.