WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
events-made-easy
Published
2015-10-15
Title
Events Made Easy < 1.5.50 - Multi CSRF to Stored Cross-Site Scripting & Event Deletion
Slug
events-made-easy
Published
2016-08-04
Title
Events Made Easy < 1.6.21 - CSRF to Cross-Site Scripting (XSS)
Slug
events-made-easy
Published
2021-10-04
Title
Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site Scripting
Slug
events-made-easy
Published
2021-12-06
Title
Events Made Easy < 2.2.36 - Subscriber+ SQL Injection
Slug
events-made-easy
Published
2022-05-30
Title
Events Made Easy < 2.2.81 - Unauthenticated SQLi
Slug
events-made-easy
Published
2022-12-23
Title
Events Made Easy < 2.3.17 - Subscriber+ Unauthorised AJAX Calls
Slug
events-made-easy
Published
2023-03-22
Title
Events Made Easy < 3.2.6 - Subscriber+ SQLi
Slug
events-made-easy
Published
2026-07-07
Title
Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass
Slug
events-made-easy
Published
2026-07-13
Title
Events Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOR
Slug
events-made-easy
Published
2026-07-24
Title
Events Made Easy < 3.1.4 - Missing Authorization
Slug
events-made-easy
Published
2026-08-20
Title
Events Made Easy < 3.2.6 - Unauthenticated Stored Cross-Site Scripting
Slug
events-made-easy
Published
2026-08-19
Title
Events Made Easy < 3.2.6 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property
Slug
events-maker
Published
2025-10-10
Title
Events Maker by dFactory <= 1.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.5.1 - Multiple Unspecified XSS Vulnerabilities
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.3.8 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2013-02-27
Title
Events Manager < 5.3.6.1 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2014-08-01
Title
Events Manager 5.3.3 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2018-03-26
Title
Events Manager <= 5.8.1.1 - Unauthenticated Stored XSS
Slug
events-manager
Published
2018-04-27
Title
Events Manager < 5.9 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
events-manager
Published
2015-08-10
Title
Events Manager < 5.6 - Cross-Site Scripting (XSS) & Code Injection
Slug
events-manager
Published
2015-06-04
Title
Events Manager < 5.5.7.1 - DOM Cross-Site Scripting (XSS)
Slug
events-manager
Published
2015-05-23
Title
Events Manager < 5.5.7 - Multiple Cross-Site Scripting (XSS)
Slug
events-manager
Published
2012-05-22
Title
Events Manager < 5.1.7 - Cross-Site Scripting (XSS)
Slug
events-manager
Published
2013-08-14
Title
Events Manager < 5.5 - Cross-Site Scripting (XSS)
Slug
events-manager
Published
2019-10-16
Title
Events Manager < 5.9.6 - Authenticated Stored Cross-Site Scripting (XSS)