WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventon-lite
Published
2025-04-04
Title
EventON < 2.4.2 - Contributor+ Local File Inclusion
Slug
eventon-lite
Published
2025-04-09
Title
EventON < 2.4.1 - Unauthenticated Local File Inclusion
Slug
eventon-lite
Published
2025-05-07
Title
EventON < 2.4.2 - Authenticated (Contributor+) Local File Inclusion
Slug
eventon-lite
Published
2025-05-16
Title
EventON < 2.4.5 - Missing Authorization
Slug
eventon-lite
Published
2025-08-14
Title
EventON Lite < 2.4.8 - Authenticated (Contributor+) Information Disclosure
Slug
eventon-rsvp
Published
2023-12-29
Title
EventON-RSVP < 2.9.5 - Reflected XSS
Slug
eventprime-event-calendar-management
Published
2023-05-22
Title
EventPrime < 3.0.0 - Unauthenticated Reflected XSS
Slug
eventprime-event-calendar-management
Published
2023-06-19
Title
EventPrime < 3.0.6 - Reflected Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2023-10-09
Title
EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter
Slug
eventprime-event-calendar-management
Published
2023-10-09
Title
EventPrime < 3.2.0 - Reflected XSS
Slug
eventprime-event-calendar-management
Published
2023-10-09
Title
EventPrime < 3.2.0 - Booking Creation via CSRF
Slug
eventprime-event-calendar-management
Published
2023-10-11
Title
EventPrime < 3.1.6 - Reflected XSS
Slug
eventprime-event-calendar-management
Published
2023-10-30
Title
EventPrime < 3.3.6 - Booking Pricing Bypass
Slug
eventprime-event-calendar-management
Published
2023-12-29
Title
EventPrime < 3.3.6 - Unauthenticated Event Access
Slug
eventprime-event-calendar-management
Published
2023-11-21
Title
EventPrime – Modern Events Calendar, Bookings and Tickets < 3.3.3 - Contributor+ Stored XSS
Slug
eventprime-event-calendar-management
Published
2024-02-02
Title
EventPrime < 3.4.0 - Improper Input Validation via save_event_booking
Slug
eventprime-event-calendar-management
Published
2024-02-14
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Event Export
Slug
eventprime-event-calendar-management
Published
2024-02-14
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Missing Authorization to Arbitrary Post Overwrite
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.3 - Unauthenticated Booking Payment Bypass
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Unauthenticated Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-03-08
Title
EventPrime – Events Calendar, Bookings and Tickets < 3.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
eventprime-event-calendar-management
Published
2024-03-25
Title
EventPrime < 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
eventprime-event-calendar-management
Published
2024-04-05
Title
EventPrime < 3.3.5 - Unauthenticated Booking Price Manipulation