WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-list
Published
2022-04-05
Title
Event List < 0.8.8 - Admin+ Stored Cross-Site Scripting
Slug
event-monster
Published
2019-05-27
Title
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
Slug
event-monster
Published
2022-10-31
Title
Event Monster < 1.2.1 - Admin+ SQLi
Slug
event-monster
Published
2022-10-31
Title
Event Monster < 1.2.0 - Visitors Deletion via CSRF
Slug
event-monster
Published
2023-12-19
Title
Event Monster < 2.0.0 - Admin+ Stored XSS
Slug
event-monster
Published
2024-04-29
Title
Event Monster < 1.4.0 - Contributor+ PHP Object Injection via Custom Meta
Slug
event-monster
Published
2024-06-19
Title
Event Monster < 1.4.4 - Unauthenticated Information Exposure
Slug
event-monster
Published
2025-01-13
Title
Event monster < 1.4.4 - Information Exposure Via Visitors List Export
Slug
event-notifier
Published
2017-01-16
Title
Event Notifier < 1.2.1 - XSS
Slug
event-organiser
Published
2025-12-27
Title
Event Organiser <= 3.12.8 - Missing Authorization
Slug
event-page-templates-addon-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
event-post
Published
2023-11-29
Title
Event post < 5.9.1 - Contributor+ Stored XSS
Slug
event-post
Published
2024-05-23
Title
Event post < 5.9.5 - Missing Authorization
Slug
event-post
Published
2024-07-11
Title
Event post < 5.9.11 - Post Metadata Update via CSRF
Slug
event-post
Published
2024-07-11
Title
Event post < 5.9.6 - Unauthenticated Local File Inclusion
Slug
event-post
Published
2024-11-05
Title
Event Post < 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Slug
event-post
Published
2025-01-24
Title
Event post < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-11
Title
Event post < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-25
Title
Event post < 5.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-04-22
Title
Event post < 5.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-06-05
Title
Event post < 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-10-16
Title
Event post < 5.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-registration
Published
2014-08-01
Title
Event Registration <= 5.44 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration <= 5.43 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration 5.32 - SQL Injection