
CVE-2026-18366
Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator
exploitationinformation-gatheringpost-exploitation+3
2

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator

PoC & checker for CVE-2026-15964 - unauthenticated password change in the WordPress plugin Single Sign On For TNG <= 2.0.0 (CVSS 9.8)