WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventprime-event-calendar-management
Published
2026-02-16
Title
EventPrime < 4.2.8.5 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint
Slug
eventprime-event-calendar-management
Published
2026-02-17
Title
EventPrime < 4.2.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter
Slug
eventprime-event-calendar-management
Published
2026-02-20
Title
EventPrime < 4.2.8.4 - Unauthenticated Information Exposure
Slug
eventprime-event-calendar-management
Published
2026-03-10
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.7.0 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-03-18
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.8.4 - Missing Authorization
Slug
eventprime-event-calendar-management
Published
2026-03-17
Title
EventPrime – Events Calendar, Bookings and Tickets < 4.2.8.1 - Unauthenticated PHP Object Injection
Slug
eventr
Published
2017-05-31
Title
eventr 1.02.2 - Blind SQL Injection
Slug
events-addon-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
events-addon-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
events-addon-for-elementor
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Missing Authorization
Slug
events-addon-for-elementor
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Cross-Site Request Forgery
Slug
events-addon-for-elementor
Published
2024-06-11
Title
Events Addon for Elementor < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
events-addon-for-elementor
Published
2024-10-14
Title
Events Addon for Elementor < 2.2.1 - Contributor+ Stored XSS
Slug
events-addon-for-elementor
Published
2024-12-17
Title
Events Addon for Elementor < 2.2.4 - Authenticated (Contributor+) Post Disclosure
Slug
events-addon-for-elementor
Published
2024-12-11
Title
Events Addon for Elementor < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-addon-for-elementor
Published
2025-08-28
Title
Events Addon for Elementor < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - SQL Injection
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - wp-admin/admin.php EC_id Parameter XSS
Slug
events-calendar
Published
2024-09-10
Title
Event Calendar <= 1.0.4 - Admin+ Stored XSS
Slug
events-calendar-for-google
Published
2024-07-11
Title
Events Calendar for Google < 3.0.0 - Contributor+ Local File Inclusion
Slug
events-calendar-pro
Published
2024-05-24
Title
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
Slug
events-calendar-pro
Published
2024-08-29
Title
The Events Calendar Pro < 7.0.2.1 - Admin+ PHP Object Injection to Remote Code Execution
Slug
events-calendar-registration-booking-by-events-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
events-for-geodirectory
Published
2025-02-23
Title
Events Calendar for GeoDirectory < 2.3.15 - Authenticated (Contributor+) PHP Object Injection
Slug
events-listing-widget
Published
2026-02-05
Title
Events Listing Widget < 1.3.5 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field