WordPress Plugin Vulnerabilities

Events Manager

2020-06-07

Events Manager < 5.9.8 - Admin+ SQL Injection

Fixed in version 5.9.8

2020-06-07

Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

Fixed in version 5.9.8

2020-02-05

Events Manager < 5.9.7.2 - CSV Injection

Fixed in version 5.9.7.2

2019-10-16

Events Manager < 5.9.6 - Authenticated Stored Cross-Site Scripting (XSS)

Fixed in version 5.9.6

2018-04-27

Events Manager < 5.9 - Authenticated Stored Cross-Site Scripting (XSS)

Fixed in version 5.9

2018-03-26

Events Manager <= 5.8.1.1 - Unauthenticated Stored XSS

Fixed in version 5.8.1.2

2015-08-10

Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection

Fixed in version 5.6

2015-06-04

Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)

Fixed in version 5.5.7.1

2015-05-23

Events Manager < 5.5.7 - Multiple Cross-Site Scripting (XSS)

Fixed in version 5.5.7

2014-08-01

Events Manager 5.3.3 - Multiple Cross-Site Scripting (XSS)

Fixed in version 5.3.4

2014-08-01

Events Manager 5.5.1 - Multiple Unspecified XSS Vulnerabilities

Fixed in version 5.5.2

2014-08-01

Events Manager 5.3.8 - Multiple Cross-Site Scripting (XSS)

Fixed in version 5.3.9

2013-08-14

Events Manager < 5.5 - Cross-Site Scripting (XSS)

Fixed in version 5.5

2013-02-27

Events Manager < 5.3.6.1 - Multiple Cross-Site Scripting (XSS)

Fixed in version 5.3.6.1

2012-05-22

Events Manager < 5.1.7 - Cross-Site Scripting (XSS)

Fixed in version 5.1.7