MDJM vulnerabilities
We track 5 vulnerabilities in MDJM products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2026.
Latest MDJM vulnerabilities
- 8.8 High severity
MDJM Event Management: Improper Privilege Management
The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_
- 7.2 High severity
MDJM Event Management: Unrestricted Upload of File with Dangerous Type
The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type validation being performed on upload
- 8.8 High severity
Mobile DJ Manager: Missing Authorization
Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile DJ Manager: from n/a through <= 1.7.8.3.
- 8.8 High severity
Mobile DJ Manager: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Object Injection.This issue affects Mobile DJ Manager: from n/a through <= 1.7.5.2.
- 7.1 High severity
Mobile DJ Manager: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through <= 1.7.5.6.