CVE-2026-27398: Wp Chill Rsvp And Event Management

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from n/a through 2.7.16.

Affected products

• Wp Chill Rsvp And Event Management: up to and including 2.7.16

Published 2026-05-25. Last modified 2026-07-20.