WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-event-aggregator
Published
2024-07-11
Title
WP Event Aggregator < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-event-aggregator
Published
2025-02-01
Title
WP Event Aggregator < 1.8.3 - Reflected Cross-Site Scripting
Slug
wp-event-manager
Published
2022-02-14
Title
WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
Slug
wp-event-manager
Published
2022-06-20
Title
WP Event Manager < 3.1.28 - Reflected Cross-Site Scripting
Slug
wp-event-manager
Published
2023-09-20
Title
WP Event Manager < 3.1.38 - Admin+ Stored XSS
Slug
wp-event-manager
Published
2023-11-09
Title
WP Event Manager < 3.1.43 - Reflected XSS
Slug
wp-event-manager
Published
2023-11-29
Title
WP Event Manager < 3.1.42 - Editor+ Stored XSS
Slug
wp-event-manager
Published
2024-02-23
Title
WP Event Manager < 3.1.42 - Reflected Cross-Site Scripting via plugin
Slug
wp-event-manager
Published
2024-07-15
Title
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce < 3.1.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
Slug
wp-event-manager
Published
2025-04-04
Title
WP Event Manager < 3.2.1 - Missing Authorization
Slug
wp-event-manager
Published
2025-05-21
Title
WP Event Manager < 3.2.0 - Unauthenticated Local File Inclusion
Slug
wp-event-manager
Published
2025-07-15
Title
WP Event Manager < 3.1.51 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
Slug
wp-event-manager
Published
2025-06-10
Title
WP Event Manager < 3.1.50 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-event-partners
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-event-partners
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-event-solution
Published
2024-02-08
Title
Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin < 3.3.51 - Missing Authorization to Unauthenticated Events Export
Slug
wp-event-solution
Published
2024-07-04
Title
Eventin < 4.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-event-solution
Published
2024-07-16
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.5 - Missing Authorization to Authenticated (Contributor+) Event Data Import
Slug
wp-event-solution
Published
2024-08-01
Title
Eventin < 4.0.6 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
wp-event-solution
Published
2024-09-26
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.9 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2024-12-19
Title
Eventin < 4.0.9 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-02-23
Title
Eventin < 4.0.21 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-03-19
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-03-19
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.25 - Missing Authorization to Unauthenticated Payment Status Update
Slug
wp-event-solution
Published
2025-04-16
Title
Eventin < 4.0.26 - Authenticated (Contributor+) Local File Inclusion