CVE-2026-39536: Wp Chill Rsvp And Event Management

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through <= 2.7.16.

Affected products

• Wp Chill Rsvp And Event Management: up to and including 2.7.16

Published 2026-04-08. Last modified 2026-07-24.