WordPress Plugin Vulnerabilities | Page 74 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2025-07-01

Title

Event List < 2.0.2 - Unauthenticated Local File Inclusion

Slug

Published

2025-08-25

Title

Event List < 2.0.5 - Authenticated (Subscriber+) Privilege Escalation

Slug

Published

2024-10-18

Title

EventON PRO - WordPress Virtual Event Calendar Plugin < 4.7 - Cross-Site Request Forgery via admin_test_email

Slug

eventon-action-user

Published

2026-07-23

Title

EventON Action User < 2.5.15 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX Action

Slug

Published

2023-06-19

Title

EventON < 2.1.2 - Unauthenticated Post Access via IDOR

Slug

Published

2023-06-19

Title

EventON < 2.1.2 - Unauthenticated Event Access

Slug

Published

2023-09-21

Title

EventON < 2.2 - Admin+ Stored XSS

Slug

Published

2023-10-20

Title

EventON < 2.2.3 - Reflected Cross Site Scripting

Slug

Published

2023-11-09

Title

EventON < 2.2 - Admin + Stored HTML Injection

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.9, Premium < 4.5.9) - Unauthenticated Virtual Event Settings Update

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS

Slug

Published

2024-01-10

Title

EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting

Slug

Published

2024-04-30

Title

EventON < 2.2.15 - Admin+ Stored XSS

Slug

Published

2024-06-22

Title

EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle

Slug

Published

2024-07-08

Title

EventON < 2.2.16 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates

Slug

Published

2024-08-19

Title

EventON < 2.2.17 - Admin+ Stored XSS

Slug

Published

2025-04-04

Title

EventON < 2.4.2 - Contributor+ Local File Inclusion

Slug

Published

2025-04-09

Title

EventON < 2.4.1 - Unauthenticated Local File Inclusion

Slug

Published

2025-05-07

Title

EventON < 2.4.2 - Authenticated (Contributor+) Local File Inclusion

Slug

Published

2025-05-16

Title

EventON < 2.4.5 - Missing Authorization

Slug

Published

2025-08-14

Title

EventON Lite < 2.4.8 - Authenticated (Contributor+) Information Disclosure

Slug

Published

2026-09-08

Title

EventON – Events Calendar < 2.5.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting