WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
event-page-templates-addon-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
event-post
Published
2023-11-29
Title
Event post < 5.9.1 - Contributor+ Stored XSS
Slug
event-post
Published
2024-05-23
Title
Event post < 5.9.5 - Missing Authorization
Slug
event-post
Published
2024-07-11
Title
Event post < 5.9.11 - Post Metadata Update via CSRF
Slug
event-post
Published
2024-07-11
Title
Event post < 5.9.6 - Unauthenticated Local File Inclusion
Slug
event-post
Published
2024-11-05
Title
Event Post < 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Slug
event-post
Published
2025-01-24
Title
Event post < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-11
Title
Event post < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-03-25
Title
Event post < 5.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-04-22
Title
Event post < 5.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-06-05
Title
Event post < 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2025-10-16
Title
Event post < 5.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-post
Published
2026-07-22
Title
Event Post < 6.1.1 - Missing Authorization
Slug
event-post
Published
2026-10-12
Title
Event Post < 6.1.2 - Authenticated (Contributor+) Insecure Direct Object Reference
Slug
event-post
Published
2026-10-12
Title
Event Post < 6.1.2 - Missing Authorization
Slug
event-registration
Published
2014-08-01
Title
Event Registration < 5.45 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration < 5.44 - SQL Injection
Slug
event-registration
Published
2014-08-01
Title
Event Registration < 5.45 - SQL Injection
Slug
event-registration
Published
2016-05-11
Title
Event Registration < 6.02.03 - SQL Injection & Stored XSS
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting
Slug
event-registration-calendar-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - CSRF to Stored XSS in settings page
Slug
event-registration-calendar-by-vcita
Published
2025-01-14
Title
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
event-rocket
Published
2025-09-22
Title
Event Rocket <= 3.3 - Missing Authorization
Slug
event-tickets
Published
2019-09-02
Title
Event Tickets <= 4.10.7.1 - CSV Injection
Slug
event-tickets
Published
2021-12-22
Title
Event Tickets < 5.2.2 - Open Redirect