WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
eventON
Published
2025-05-16
Title
EventON (Pro) <= 4.9.9 - Missing Authorization
Slug
eventON
Published
2025-07-03
Title
EventON <= 4.9.9 - Missing Authorization
Slug
eventON
Published
2025-10-29
Title
EventON Pro <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventON
Published
2026-03-02
Title
EventON <= 4.9.12 - Reflected Cross-Site Scripting
Slug
eventON
Published
2026-06-29
Title
EventON - WordPress Virtual Event Calendar Plugin < 5.0.12 - Unauthenticated Blind SQL Injection via Search Parameter
Slug
eventbee-rsvp-widget
Published
2025-04-01
Title
Eventbee RSVP Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventbee-ticketing-widget
Published
2025-11-10
Title
Eventbee Ticketing Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
eventer
Published
2025-01-16
Title
Eventer < 3.9.8 - Authenticated (Subscriber+) Arbitrary File Read
Slug
eventer
Published
2025-01-27
Title
Eventer < 3.9.9 - Unauthenticated SQL Injection via eventer_get_attendees
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.5.1 - Missing Authorization to Unauthenticated Event Ticket Download
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
eventer
Published
2025-02-03
Title
Eventer < 3.9.9.1 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Slug
eventer
Published
2025-02-14
Title
Eventer < 3.9.9 - Reflected Cross-Site Scripting
Slug
eventer
Published
2025-03-06
Title
Eventer < 3.9.9.3 - Subscriber+ SQLi
Slug
eventer
Published
2025-05-16
Title
Eventer <= 3.9.6 - Unauthenticated SQL Injection
Slug
eventer
Published
2025-05-16
Title
Eventer <= 3.9.6 - Missing Authorization
Slug
eventer
Published
2025-08-04
Title
Eventer < 3.11.2.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
eventer
Published
2026-07-07
Title
Eventer < 4.4.4 - Unauthenticated SQL Injection via 'code' Parameter
Slug
eventer
Published
2026-07-07
Title
Eventer <= 4.4.2 - Unauthenticated Privilege Escalation via Insecure Password Reset
Slug
eventer
Published
2026-10-20
Title
Eventer - WordPress Event & Booking Manager Plugin <= 0.1.1 - Reflected Cross-Site Scripting
Slug
eventify
Published
2014-08-01
Title
Eventify - Simple Events < 1.8.a - SQL Injection
Slug
eventify
Published
2022-11-30
Title
Eventify < 2.2.0 - Admin+ Stored XSS
Slug
eventin-pro
Published
2025-08-11
Title
WordPress Event Manager, Event Calendar and Booking Plugin < 4.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
eventin-pro
Published
2025-08-13
Title
WordPress Event Manager, Event Calendar and Booking Plugin < 4.0.25 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
eventkoi-lite
Published
2026-06-17
Title
Event Koi Lite < 1.3.14.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure via REST API Endpoints