WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-addon-for-elementor
Published
2025-08-28
Title
Events Addon for Elementor < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - SQL Injection
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - wp-admin/admin.php EC_id Parameter XSS
Slug
events-calendar
Published
2024-09-10
Title
Event Calendar <= 1.0.4 - Admin+ Stored XSS
Slug
events-calendar-for-google
Published
2024-07-11
Title
Events Calendar for Google < 3.0.0 - Contributor+ Local File Inclusion
Slug
events-calendar-pro
Published
2024-05-24
Title
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
Slug
events-calendar-pro
Published
2024-08-29
Title
The Events Calendar Pro < 7.0.2.1 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution
Slug
events-calendar-registration-booking-by-events-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
events-for-geodirectory
Published
2025-02-23
Title
Events Calendar for GeoDirectory < 2.3.15 - Authenticated (Contributor+) PHP Object Injection
Slug
events-listing-widget
Published
2026-02-05
Title
Events Listing Widget < 1.3.5 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field
Slug
events-made-easy
Published
2015-10-15
Title
Events Made Easy < 1.5.50 - Multi CSRF to Stored Cross-Site Scripting & Event Deletion
Slug
events-made-easy
Published
2016-08-04
Title
Events Made Easy < 1.6.21 - CSRF to Cross-Site Scripting (XSS)
Slug
events-made-easy
Published
2021-10-04
Title
Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting
Slug
events-made-easy
Published
2021-12-06
Title
Events Made Easy < 2.2.36 - Subscriber+ SQL Injection
Slug
events-made-easy
Published
2022-05-30
Title
Events Made Easy < 2.2.81 - Unauthenticated SQLi
Slug
events-made-easy
Published
2022-12-23
Title
Events Made Easy < 2.3.17 - Subscriber+ Unauthorised AJAX Calls
Slug
events-made-easy
Published
2023-03-22
Title
Events Made Easy <= 2.3.14 - Subscriber+ SQLi
Slug
events-maker
Published
2025-10-10
Title
Events Maker by dFactory <= 1.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.5.1 - Multiple Unspecified XSS Vulnerabilities
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.3.8 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2013-02-27
Title
Events Manager < 5.3.6.1 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.3.3 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2018-03-26
Title
Events Manager <= 5.8.1.1 - Unauthenticated Stored XSS
Slug
events-manager
Published
2018-04-27
Title
Events Manager < 5.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
events-manager
Published
2015-08-10
Title
Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection