WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-addon-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
events-addon-for-elementor
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Missing Authorization
Slug
events-addon-for-elementor
Published
2023-11-14
Title
Events Addon for Elementor < 2.1.3 - Cross-Site Request Forgery
Slug
events-addon-for-elementor
Published
2024-06-11
Title
Events Addon for Elementor < 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
events-addon-for-elementor
Published
2024-10-14
Title
Events Addon for Elementor < 2.2.1 - Contributor+ Stored XSS
Slug
events-addon-for-elementor
Published
2024-12-17
Title
Events Addon for Elementor < 2.2.4 - Authenticated (Contributor+) Post Disclosure
Slug
events-addon-for-elementor
Published
2024-12-11
Title
Events Addon for Elementor < 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-addon-for-elementor
Published
2025-08-28
Title
Events Addon for Elementor < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
Slug
events-addon-for-elementor
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - SQL Injection
Slug
events-calendar
Published
2014-08-01
Title
Events Calendar - wp-admin/admin.php EC_id Parameter XSS
Slug
events-calendar
Published
2024-09-10
Title
Event Calendar <= 1.0.4 - Admin+ Stored XSS
Slug
events-calendar-for-google
Published
2024-07-11
Title
Events Calendar for Google < 3.0.0 - Contributor+ Local File Inclusion
Slug
events-calendar-pro
Published
2024-05-24
Title
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
Slug
events-calendar-pro
Published
2024-08-29
Title
The Events Calendar Pro < 7.0.2.1 - Admin+ PHP Object Injection to Remote Code Execution
Slug
events-calendar-registration-booking-by-events-plus
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
events-for-geodirectory
Published
2025-02-23
Title
Events Calendar for GeoDirectory < 2.3.15 - Authenticated (Contributor+) PHP Object Injection
Slug
events-for-geodirectory
Published
2026-04-16
Title
Events Calendar for GeoDirectory < 2.3.26 - Authenticated (Contributor+) PHP Object Injection
Slug
events-for-geodirectory
Published
2026-06-08
Title
Events Calendar for GeoDirectory < 2.3.29 - Subscriber+ Privilege Escalation
Slug
events-in-city
Published
2026-05-26
Title
Events In City <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
events-listing-widget
Published
2026-02-05
Title
Events Listing Widget < 1.3.5 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field
Slug
events-made-easy
Published
2015-10-15
Title
Events Made Easy < 1.5.50 - Multi CSRF to Stored Cross-Site Scripting & Event Deletion
Slug
events-made-easy
Published
2016-08-04
Title
Events Made Easy < 1.6.21 - CSRF to Cross-Site Scripting (XSS)
Slug
events-made-easy
Published
2021-10-04
Title
Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting
Slug
events-made-easy
Published
2021-12-06
Title
Events Made Easy < 2.2.36 - Subscriber+ SQL Injection