WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eveeno
Published
2024-12-13
Title
Eveeno < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
evenium
Published
2025-09-10
Title
Evenium <= 1.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-calendar-wd
Published
2017-06-06
Title
Event Calendar WD <= 1.0.93 - Authenticated Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2018-11-02
Title
Event Calendar WD <= 1.1.21 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-06-01
Title
Event Calendar WD < 1.1.45 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-06-25
Title
Event Calendar WD < 1.1.46 - Cross-Site Scripting (XSS)
Slug
event-calendar-wd
Published
2021-12-20
Title
Event Calendar < 1.1.51 - Reflected Cross-Site Scripting
Slug
event-calendar-wd
Published
2021-12-20
Title
Event Calendar < 1.1.51 - Subscriber+ Event Creation
Slug
event-calendars
Published
2024-09-10
Title
Event Calendar <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion
Slug
event-countdown-timer
Published
2025-01-16
Title
Event Countdown Timer Plugin by TechMix <= 1.4 - Reflected Cross-Site Scripting
Slug
event-easy-calendar
Published
2014-08-01
Title
Event Easy Calendar 1.0.0 - Multiple Administrator Action CSRF
Slug
event-easy-calendar
Published
2014-08-01
Title
Event Easy Calendar 1.0.0 - Multiple Unspecified XSS
Slug
event-espresso-core-reg
Published
2021-06-25
Title
Event Espresso Core < 4.10.7.p - Reflected Cross-Site Scripting (XSS)
Slug
event-espresso-decaf
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
event-espresso-decaf
Published
2021-08-16
Title
Event Espresso 4 Decaf < 4.10.12 - Cross-Site Request Forgery
Slug
event-espresso-decaf
Published
2024-08-20
Title
Event Espresso 4 Decaf – Event Registration Event Ticketing < 5.0.22.decafdecaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification
Slug
event-espresso-decaf
Published
2024-12-30
Title
Event Espresso 4 Decaf < 5.0.31.decafdecaf - Cross-Site Request Forgery
Slug
event-espresso-decaf
Published
2026-01-15
Title
Event Espresso 4 Decaf < 5.0.53.decafdecaf - Missing Authorization to Unauthenticated Settings Change
Slug
event-espresso-free
Published
2017-07-04
Title
Event Espresso Lite < 3.1.37.12.L - Authenticated Blind SQL Injection
Slug
event-feed-for-eventbrite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
event-feed-for-eventbrite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
event-feed-for-eventbrite
Published
2025-09-03
Title
Event Feed for Eventbrite < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-geek
Published
2021-06-28
Title
Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
Slug
event-list
Published
2017-06-04
Title
Event List <= 0.7.8 - Authenticated SQL Injection
Slug
event-list
Published
2017-07-31
Title
Event List < 0.7.10 - XSS