WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-espresso-decaf
Published
2021-08-16
Title
Event Espresso 4 Decaf < 4.10.12 - Cross-Site Request Forgery
Slug
event-espresso-decaf
Published
2024-08-20
Title
Event Espresso 4 Decaf – Event Registration Event Ticketing < 5.0.22.decafdecaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification
Slug
event-espresso-decaf
Published
2024-12-30
Title
Event Espresso 4 Decaf < 5.0.31.decafdecaf - Cross-Site Request Forgery
Slug
event-espresso-decaf
Published
2026-01-15
Title
Event Espresso 4 Decaf < 5.0.53.decafdecaf - Missing Authorization to Unauthenticated Settings Change
Slug
event-espresso-free
Published
2017-07-04
Title
Event Espresso Lite < 3.1.37.12.L - Authenticated Blind SQL Injection
Slug
event-feed-for-eventbrite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
event-feed-for-eventbrite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
event-feed-for-eventbrite
Published
2025-09-03
Title
Event Feed for Eventbrite < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-geek
Published
2021-06-28
Title
Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
Slug
event-list
Published
2017-06-04
Title
Event List <= 0.7.8 - Authenticated SQL Injection
Slug
event-list
Published
2017-07-31
Title
Event List < 0.7.10 - XSS
Slug
event-list
Published
2022-04-05
Title
Event List < 0.8.8 - Admin+ Stored Cross-Site Scripting
Slug
event-monster
Published
2019-05-27
Title
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
Slug
event-monster
Published
2022-10-31
Title
Event Monster < 1.2.1 - Admin+ SQLi
Slug
event-monster
Published
2022-10-31
Title
Event Monster < 1.2.0 - Visitors Deletion via CSRF
Slug
event-monster
Published
2023-12-19
Title
Event Monster < 2.0.0 - Admin+ Stored XSS
Slug
event-monster
Published
2024-04-29
Title
Event Monster < 1.4.0 - Contributor+ PHP Object Injection via Custom Meta
Slug
event-monster
Published
2024-06-19
Title
Event Monster < 1.4.4 - Unauthenticated Information Exposure
Slug
event-monster
Published
2025-01-13
Title
Event monster < 1.4.4 - Information Exposure Via Visitors List Export
Slug
event-monster
Published
2026-06-05
Title
Event Monster < 2.2.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Action
Slug
event-notifier
Published
2017-01-16
Title
Event Notifier < 1.2.1 - XSS
Slug
event-organiser
Published
2025-12-27
Title
Event Organiser <= 3.12.8 - Missing Authorization
Slug
event-organiser
Published
2026-06-30
Title
Event Organiser < 3.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via eo_events Shortcode
Slug
event-page-templates-addon-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
event-post
Published
2023-11-29
Title
Event post < 5.9.1 - Contributor+ Stored XSS