Description
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7.
Published: 2026-10-12
Score: 3.7 Low
EPSS: < 1% Very Low
KEV: No
Impact: Race condition on shared resources
Action: Apply patch
AI Analysis

Impact

The Pixelite Events Manager plugin for WordPress contains a race condition vulnerability (CWE‑362) that arises from concurrent execution accessing a shared resource without proper synchronization. This flaw allows an attacker to trigger race conditions when plugin functions are invoked simultaneously, potentially leading to inconsistent data, incorrect processing, or unexpected operational behavior on the affected site.

Affected Systems

The vulnerability affects all releases of the Pixelite Events Manager WordPress plugin up to and including version 7.4.7. Systems using any version equal to or older than 7.4.7 are susceptible to this race condition.

Risk and Exploitability

The CVSS score of 3.7 indicates low severity, and no EPSS data are available. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is through concurrent requests to the plugin’s web interface or automated requests. While the exploitation risk is comparatively low, the race condition could disrupt service or corrupt data under simultaneous use.

Generated by OpenCVE AI on October 12, 2026 at 20:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Events Manager plugin to a version newer than 7.4.7
  • If an upgrade cannot be performed immediately, disable the plugin to prevent potential exploitation
  • Monitor WordPress logs for unusual concurrent operations that indicate race condition attempts

Generated by OpenCVE AI on October 12, 2026 at 20:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 18 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Pixelite
Pixelite events Manager
Wordpress-extensions
Wordpress-extensions events Manager
Vendors & Products Pixelite
Pixelite events Manager
Wordpress-extensions
Wordpress-extensions events Manager

Mon, 12 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
Description Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7.
Title WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability
Weaknesses CWE-362
References
Metrics cvssV3_1

{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'}

Subscriptions

Pixelite Events Manager
Wordpress-extensions Events Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-10-12T22:53:59.670Z

Reserved: 2026-04-29T09:05:01.789Z

Link: CVE-2026-42689

cve-icon Vulnrichment

Updated: 2026-10-12T22:52:30.160Z

cve-icon NVD

Status : Deferred

Published: 2026-10-12T18:17:23.030

Modified: 2026-10-13T13:28:15.717

Link: CVE-2026-42689

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T21:30:14Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')