WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-registration
Published
2016-05-11
Title
Event Registration 6.02.02 - SQL Injection & Stored XSS
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - CSRF to Stored XSS in settings page
Slug
event-registration-calendar-by-vcita
Published
2025-01-14
Title
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-rocket
Published
2025-09-22
Title
Event Rocket <= 3.3 - Missing Authorization
Slug
event-tickets
Published
2019-09-02
Title
Event Tickets <= 4.10.7.1 - CSV Injection
Slug
event-tickets
Published
2021-12-22
Title
Event Tickets < 5.2.2 - Open Redirect
Slug
event-tickets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
event-tickets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Slug
event-tickets
Published
2024-02-21
Title
Event Tickets and Registration < 5.8.2 - Missing Authorization
Slug
event-tickets
Published
2024-03-26
Title
Event Tickets and Registration < 5.8.3 - Improper Authorization to Information Disclosure
Slug
event-tickets
Published
2024-07-12
Title
Event Tickets < 5.11.0.5 - Cross-Site Request Forgery
Slug
event-tickets
Published
2025-01-29
Title
Event Tickets < 5.18.1.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
event-tickets
Published
2025-02-13
Title
Event Tickets and Registration < 5.19.1.2 - Missing Authorization to Ticket Deletion
Slug
event-tickets
Published
2025-03-27
Title
Event Tickets < 5.20.1 - Reflected Cross-Site Scripting
Slug
event-tickets
Published
2025-10-17
Title
Event Tickets and Registration < 5.26.6 - Unauthenticated Ticket Payment Bypass
Slug
event-tickets
Published
2025-10-16
Title
Event Tickets < 5.26.4 - Missing Authorization
Slug
event-tickets-plus
Published
2024-02-08
Title
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
Slug
event-tickets-plus
Published
2024-02-08
Title
Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure
Slug
event-tickets-with-ticket-scanner
Published
2024-06-03
Title
Event Tickets with Ticket Scanner < 2.3.2 - Reflected Cross-Site Scripting
Slug
event-tickets-with-ticket-scanner
Published
2024-04-20
Title
Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS
Slug
event-tickets-with-ticket-scanner
Published
2024-11-15
Title
Event Tickets with Ticket Scanner < 2.3.12 - Authenticated (Author+) Remote Code Execution
Slug
event-tickets-with-ticket-scanner
Published
2024-12-05
Title
Event Tickets with Ticket Scanner < 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
event-tickets-with-ticket-scanner
Published
2025-03-06
Title
Event Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRF