WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventify
Published
2022-11-30
Title
Eventify <= 2.1 - Admin+ Stored XSS
Slug
eventin-pro
Published
2025-08-11
Title
WordPress Event Manager, Event Calendar and Booking Plugin < 4.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eventin-pro
Published
2025-08-13
Title
WordPress Event Manager, Event Calendar and Booking Plugin < 4.0.25 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
eventkoi-lite
Published
2026-06-17
Title
Event Koi Lite < 1.3.14.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure via REST API Endpoints
Slug
eventlist
Published
2025-07-01
Title
Event List < 2.0.2 - Unauthenticated Local File Inclusion
Slug
eventlist
Published
2025-08-25
Title
Event List < 2.0.5 - Authenticated (Subscriber+) Privilege Escalation
Slug
eventon
Published
2024-10-18
Title
EventON PRO - WordPress Virtual Event Calendar Plugin < 4.7 - Cross-Site Request Forgery via admin_test_email
Slug
eventon-lite
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Post Access via IDOR
Slug
eventon-lite
Published
2023-06-19
Title
EventON < 2.1.2 - Unauthenticated Event Access
Slug
eventon-lite
Published
2023-09-21
Title
EventON < 2.2 - Admin+ Stored XSS
Slug
eventon-lite
Published
2023-10-20
Title
EventON < 2.2.3 - Reflected Cross Site Scripting
Slug
eventon-lite
Published
2023-11-09
Title
EventON < 2.2 - Admin + Stored HTML Injection
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.9, Premium < 4.5.9) - Unauthenticated Virtual Event Settings Update
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS
Slug
eventon-lite
Published
2024-01-10
Title
EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting
Slug
eventon-lite
Published
2024-04-30
Title
EventON < 2.2.15 - Admin+ Stored XSS
Slug
eventon-lite
Published
2024-06-22
Title
EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle
Slug
eventon-lite
Published
2024-07-08
Title
EventON < 2.2.16 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
Slug
eventon-lite
Published
2024-08-19
Title
EventON < 2.2.17 - Admin+ Stored XSS
Slug
eventon-lite
Published
2025-04-04
Title
EventON < 2.4.2 - Contributor+ Local File Inclusion
Slug
eventon-lite
Published
2025-04-09
Title
EventON < 2.4.1 - Unauthenticated Local File Inclusion
Slug
eventon-lite
Published
2025-05-07
Title
EventON < 2.4.2 - Authenticated (Contributor+) Local File Inclusion