MDJM Event Management
MDJM Event Management has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 4 high. 2026 was the busiest year with 3 disclosures.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (17%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.
5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
5 independent researchers contributed these findings, one record each. MDJM Event Management is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-52824MDJM Event Management <= 1.7.6 - Authenticated (Subscriber+) Privilege Escalation
Read the full analysisVulnerability Records

MDJM Event Management
Author
MDJM
MDJM Event Management is the solution for Event based businesses who wish to automate their processes and enable clients to manage events. It is an event planning solution built specifically for websites running on WordPress ensuring the users are familiar with the Administration settings and look and feel. MDJM Event Management allows you to manage your events from enquiry stage through to completion. Add your employees, your clients and then create an event. Key Features No event or employee restrictions Multi employee aware Record all transactions Detailed reporting Granular permissions for employee roles Showcase your business products Auto calculate and apply travel costs to your events A front-end client portal (Client Zone) where your clients can manage their events Client playlists with guest access Digital Contract Signing Automated emails Track whether or not client emails have been opened Create event packages for simplistic price assignment Track the most successful marketing strategies for your business Automate daily and weekly tasks Create an unlimited number of custom email and contract templates Developer friendly A number of plugin extensions are available to further enhance the automation including Contact Forms, Payment Gateways and Calendar Sync Communication with MDJM Event Management Servers This plugin will only communicate with MDJM Event Management servers when paid MDJM extensions are installed for the purpose of license checks and providing updates to the paid extensions only. This communication does not happen when there are no paid MDJM extensions installed. Paid extensions installation, licensing and updates All paid extensions for MDJM Event Management must be installed manually, see Installing Extensions for more info. License and update checks for paid extensions are only run when there are paid extensions for MDJM Event Management installed.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C