WordPress Plugin Vulnerabilities | Page 132 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

wp-event-solution

Published

2026-07-13

Title

Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation

Slug

wp-event-solution

Published

2026-08-05

Title

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.10 - Missing Authorization

Slug

wp-event-solution

Published

2026-08-06

Title

Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting

Slug

wp-event-solution

Published

2026-08-13

Title

Event SOlution < 4.1.19 - Authenticated (Customer+) Information Exposure

Slug

wp-event-solution

Published

2026-08-10

Title

Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint

Slug

wp-event-solution

Published

2026-08-10

Title

Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR

Slug

wp-event-solution

Published

2026-08-10

Title

Eventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST API

Slug

wp-event-solution

Published

2026-08-13

Title

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Customer+) Arbitrary Content Deletion

Slug

wp-event-solution

Published

2026-08-17

Title

Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR

Slug

wp-event-solution

Published

2026-08-17

Title

Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

Slug

wp-event-solution

Published

2026-08-17

Title

Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery

Slug

wp-event-solution

Published

2026-08-17

Title

Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR

Slug

wp-event-solution

Published

2026-08-17

Title

Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR

Slug

wp-event-solution

Published

2026-09-01

Title

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.23 - Missing Authorization

Slug

wp-event-solution

Published

2026-08-24

Title

Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure

Slug

wp-event-solution

Published

2026-08-24

Title

Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

Slug

wp-event-solution

Published

2026-09-03

Title

Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

Slug

wp-event-solution

Published

2026-09-03

Title

Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta

Slug

wp-event-solution

Published

2026-09-08

Title

Eventin < 4.1.23 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter

Slug

Published

2024-11-08

Title

EventPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2017-11-03

Title

Events <= 2.3.4 - Authenticated SQL Injection

Slug

wp-events-manager

Published

2024-08-30

Title

WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection

Slug

wp-events-manager

Published

2025-09-22

Title

WP Events Manager < 2.2.2 - Missing Authorization

Slug

wp-events-manager

Published

2026-08-03

Title

WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter

Slug

wp-events-manager

Published

2026-08-03

Title

WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR