WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-tickets
Published
2025-03-27
Title
Event Tickets < 5.20.1 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2025-10-17
Title
Event Tickets and Registration < 5.26.6 - Unauthenticated Ticket Payment Bypass
Slug
event-tickets
Published
2025-10-16
Title
Event Tickets < 5.26.4 - Missing Authorization
Slug
event-tickets-manager-for-woocommerce
Published
2026-04-07
Title
Event Tickets Manager for WooCommerce < 1.5.4 - Missing Authorization
Slug
event-tickets-plus
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Slug
event-tickets-plus
Published
2024-02-08
Title
Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure
Slug
event-tickets-with-ticket-scanner
Published
2024-06-03
Title
Event Tickets with Ticket Scanner < 2.3.2 - Reflected Cross-Site Scripting
Slug
event-tickets-with-ticket-scanner
Published
2024-04-20
Title
Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
Slug
event-tickets-with-ticket-scanner
Published
2024-11-15
Title
Event Tickets with Ticket Scanner < 2.3.12 - Authenticated (Author+) Remote Code Execution
Slug
event-tickets-with-ticket-scanner
Published
2024-12-05
Title
Event Tickets with Ticket Scanner < 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
event-tickets-with-ticket-scanner
Published
2025-03-06
Title
Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF
Slug
event-tickets-with-ticket-scanner
Published
2026-01-15
Title
Event Tickets with Ticket Scanner < 2.8.6 - Unauthenticated Remote Code Execution
Slug
eventON
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Event Access
Slug
eventON
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Post Access via IDOR
Slug
eventON
Published
2024-01-05
Title
EventON < 4.4.1 - Reflected Cross-Site Scripting
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.9, Premium < 4.5.9) - Unauthenticated Virtual Event Settings Update
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
Slug
eventON
Published
2024-01-31
Title
EventON < 4.4.1 - Reflected Cross-Site Scripting
Slug
eventON
Published
2025-05-16
Title
EventON - WordPress Virtual Event Calendar Plugin < 4.9.7 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eventON
Published
2025-05-16
Title
EventON (Pro) <= 4.9.9 - Missing Authorization
Slug
eventON
Published
2025-07-03
Title
EventON <= 4.9.9 - Missing Authorization