WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-manager
Published
2024-03-27
Title
Events Manager < 6.4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-manager
Published
2024-03-27
Title
Events Manager < 6.4.7.2 - Cross-Site Request Forgery
Slug
events-manager
Published
2024-03-28
Title
Events Manager < 6.4.7 - Missing Authorization
Slug
events-manager
Published
2024-03-28
Title
Events Manager < 6.4.7.2 - Cross-Site Request Forgery
Slug
events-manager
Published
2024-06-11
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
Slug
events-manager
Published
2024-06-28
Title
Events Manager < 6.4.9 - Reflected Cross-Site Scripting
Slug
events-manager
Published
2025-02-20
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.6.4 - Unauthenticated SQL Injection via Event Status Parameter
Slug
events-manager
Published
2025-02-26
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 6.6.4.2 - Missing Authorization
Slug
events-manager
Published
2025-07-09
Title
Events Manager < 7.0.4 - Unauthenticated SQL Injection via `orderby` Parameter
Slug
events-manager
Published
2025-07-09
Title
Event Manager < 7.0.4 - Reflected Cross-Site Scripting via `calendar_header` Parameter
Slug
events-manager
Published
2025-07-09
Title
Events Manager < 7.0.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
Slug
events-manager
Published
2025-12-11
Title
Events Manager < 7.2.2.3 - Unauthenticated Information Exposure
Slug
events-manager
Published
2025-12-11
Title
Events Manager – Calendar, Bookings, Tickets, and more! < 7.2.2.3 - Cross-Site Request Forgery to Location Deletion
Slug
events-manager
Published
2025-12-17
Title
Events Manager < 7.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
Slug
events-manager-extended
Published
2014-08-01
Title
Events Manager Extended - Stored XSS
Slug
events-manager-pro
Published
2020-02-05
Title
Events Manager Pro < 2.6.7.2 - CSV Injection
Slug
events-manager-pro-extended
Published
2024-10-30
Title
Events Manager Pro – extended <= 0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Slug
events-planner
Published
2025-02-14
Title
Events Planner <= 1.3.10 - Reflected Cross-Site Scripting
Slug
events-search-addon-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
events-widgets-for-elementor-and-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
ever-compare
Published
2023-02-28
Title
Ever Compare < 1.2.4 - Arbitrary Plugin Activation via CSRF
Slug
everest-admin-theme-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
everest-backup
Published
2023-12-29
Title
Everest Backup < 2.2.0 - Sensitive Information Exposure via Log File
Slug
everest-backup
Published
2024-03-25
Title
Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload
Slug
everest-backup
Published
2024-11-05
Title
Everest Backup < 2.2.14 - Unauthenticated Backup Download