WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-manager
Published
2015-06-04
Title
Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)
Slug
events-manager
Published
2015-05-23
Title
Events Manager < 5.5.7 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2012-05-22
Title
Events Manager < 5.1.7 - Cross-Site Scripting (XSS)
Slug
events-manager
Published
2013-08-14
Title
Events Manager < 5.5 - Cross-Site Scripting (XSS)
Slug
events-manager
Published
2019-10-16
Title
Events Manager < 5.9.6 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
events-manager
Published
2020-02-05
Title
Events Manager < 5.9.7.2 - CSV Injection
Slug
events-manager
Published
2020-06-07
Title
Events Manager < 5.9.8 - Admin+ SQL Injection
Slug
events-manager
Published
2020-06-07
Title
Events Manager < 5.9.8 - Cross-Site Scripting (XSS)
Slug
events-manager
Published
2023-11-23
Title
Events Manager < 6.4.6 - Reflected Cross-Site Scripting
Slug
events-manager
Published
2024-02-28
Title
Events Manager < 6.4.7 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
Slug
events-manager
Published
2024-03-27
Title
Events Manager < 6.4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-manager
Published
2024-03-27
Title
Events Manager < 6.4.7.2 - Cross-Site Request Forgery
Slug
events-manager
Published
2024-03-28
Title
Events Manager < 6.4.7 - Missing Authorization
Slug
events-manager
Published
2024-03-28
Title
Events Manager < 6.4.7.2 - Cross-Site Request Forgery
Slug
events-manager
Published
2024-06-11
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
Slug
events-manager
Published
2024-06-28
Title
Events Manager < 6.4.9 - Reflected Cross-Site Scripting
Slug
events-manager
Published
2025-02-20
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.6.4 - Unauthenticated SQL Injection via Event Status Parameter
Slug
events-manager
Published
2025-02-26
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.6.4.2 - Missing Authorization
Slug
events-manager
Published
2025-07-09
Title
Events Manager < 7.0.4 - Unauthenticated SQL Injection via `orderby` Parameter
Slug
events-manager
Published
2025-07-09
Title
Event Manager < 7.0.4 - Reflected Cross-Site Scripting via `calendar_header` Parameter
Slug
events-manager
Published
2025-07-09
Title
Events Manager < 7.0.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
Slug
events-manager
Published
2025-12-11
Title
Events Manager < 7.2.2.3 - Unauthenticated Information Exposure
Slug
events-manager
Published
2025-12-11
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 7.2.2.3 - Cross-Site Request Forgery to Location Deletion
Slug
events-manager
Published
2025-12-17
Title
Events Manager < 7.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
Slug
events-manager-extended
Published
2014-08-01
Title
Events Manager Extended - Stored XSS