WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-post
Published
2024-11-05
Title
Event Post < 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Slug
event-post
Published
2025-01-24
Title
Event post < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-11
Title
Event post < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-25
Title
Event post < 5.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-04-22
Title
Event post < 5.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-06-05
Title
Event post < 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-10-16
Title
Event post < 5.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-registration
Published
2014-08-01
Title
Event Registration <= 5.44 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration <= 5.43 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration 5.32 - SQL Injection
Slug
event-registration
Published
2016-05-11
Title
Event Registration 6.02.02 - SQL Injection & Stored XSS
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - CSRF to Stored XSS in settings page
Slug
event-registration-calendar-by-vcita
Published
2025-01-14
Title
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-rocket
Published
2025-09-22
Title
Event Rocket <= 3.3 - Missing Authorization
Slug
event-tickets
Published
2019-09-02
Title
Event Tickets <= 4.10.7.1 - CSV Injection
Slug
event-tickets
Published
2021-12-22
Title
Event Tickets < 5.2.2 - Open Redirect
Slug
event-tickets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
event-tickets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Slug
event-tickets
Published
2024-02-21
Title
Event Tickets and Registration < 5.8.2 - Missing Authorization
Slug
event-tickets
Published
2024-03-26
Title
Event Tickets and Registration < 5.8.3 - Improper Authorization to Information Disclosure
Slug
event-tickets
Published
2024-07-12
Title
Event Tickets < 5.11.0.5 - Cross-Site Request Forgery
Slug
event-tickets
Published
2025-01-29
Title
Event Tickets < 5.18.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
event-tickets
Published
2025-02-13
Title
Event Tickets and Registration < 5.19.1.2 - Missing Authorization to Ticket Deletion