WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-tickets-with-ticket-scanner
Published
2026-01-15
Title
Event Tickets with Ticket Scanner < 2.8.6 - Unauthenticated Remote Code Execution
Slug
eventON
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Event Access
Slug
eventON
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Post Access via IDOR
Slug
eventON
Published
2024-01-05
Title
EventON < 4.4.1 - Reflected Cross-Site Scripting
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.9, Premium < 4.5.9) - Unauthenticated Virtual Event Settings Update
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
Slug
eventON
Published
2024-01-10
Title
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
Slug
eventON
Published
2024-01-31
Title
EventON < 4.4.1 - Reflected Cross-Site Scripting
Slug
eventON
Published
2025-05-16
Title
EventON - WordPress Virtual Event Calendar Plugin < 4.9.7 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eventON
Published
2025-05-16
Title
EventON (Pro) <= 4.9.9 - Missing Authorization
Slug
eventON
Published
2025-07-03
Title
EventON <= 4.9.9 - Missing Authorization
Slug
eventON
Published
2025-10-29
Title
EventON Pro <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventbee-rsvp-widget
Published
2025-04-01
Title
Eventbee RSVP Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventbee-ticketing-widget
Published
2025-11-10
Title
Eventbee Ticketing Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventer
Published
2025-01-16
Title
Eventer < 3.9.8 - Authenticated (Subscriber+) Arbitrary File Read
Slug
eventer
Published
2025-01-27
Title
Eventer < 3.9.9 - Unauthenticated SQL Injection via eventer_get_attendees
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.5.1 - Missing Authorization to Unauthenticated Event Ticket Download
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.1 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Slug
eventer
Published
2025-02-14
Title
Eventer < 3.9.9 - Reflected Cross-Site Scripting
Slug
eventer
Published
2025-03-06
Title
Eventer < 3.9.9.3 - Subscriber+ SQLi
Slug
eventer
Published
2025-05-16
Title
Eventer <= 3.9.6 - Unauthenticated SQL Injection