WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mage-eventpress
Published
2025-12-04
Title
WpEvently < 5.0.5 - Missing Authorization
Slug
mage-eventpress
Published
2025-11-30
Title
WpEvently < 5.0.5 - Missing Authorization
Slug
mage-eventpress
Published
2025-12-06
Title
WpEvently < 5.1.2 - Cross-Site Request Forgery
Slug
mage-eventpress
Published
2025-12-25
Title
WpEvently < 5.0.9 - Authenticated (Contributor+) PHP Object Injection
Slug
mage-eventpress
Published
2026-02-18
Title
WpEvently < 5.1.2 - Unauthenticated PHP Object Injection
Slug
mage-eventpress
Published
2026-03-20
Title
Event Booking Manager for WooCommerce < 5.1.5 - Reflected Cross-Site Scripting
Slug
mage-eventpress
Published
2026-02-14
Title
WpEvently < 5.1.9 - Unauthenticated Information Exposure
Slug
mage-eventpress
Published
2026-05-26
Title
Event Booking Manager for WooCommerce < 5.3.4 - Missing Authorization
Slug
mage-eventpress
Published
2026-07-22
Title
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content
Slug
mage-eventpress
Published
2026-07-22
Title
Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content
Slug
mage-eventpress
Published
2026-07-22
Title
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
Slug
mage-eventpress
Published
2026-07-28
Title
Event Booking Manager for WooCommerce < 5.3.8 - Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification via mep_save_payment_settings_modal AJAX Action
Slug
mage-eventpress
Published
2026-08-27
Title
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.6.0 - Missing Authorization
Slug
mage-eventpress
Published
2026-08-27
Title
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.6.0 - Missing Authorization
Slug
mage-eventpress
Published
2026-09-07
Title
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.6.4 - Unauthenticated Insecure Direct Object Reference
Slug
mage-eventpress
Published
2026-09-15
Title
Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure
Slug
mage-eventpress
Published
2026-09-15
Title
Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel
Slug
mage-eventpress
Published
2026-09-21
Title
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list
Slug
mage-eventpress
Published
2026-10-22
Title
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.7.9 - Missing Authorization
Slug
mage-eventpress
Published
2026-10-27
Title
Event Booking Manager for WooCommerce < 5.7.9 - Authenticated (Shop Manager+) Privilege Escalation to 'page' Parameter
Slug
mage-eventpress
Published
2026-10-26
Title
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar < 5.7.10 - Unauthenticated HTML Injection
Slug
mage-eventpress-pro
Published
2026-07-27
Title
Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Price
Slug
mage-forms
Published
2024-11-08
Title
Mage Front End Forms <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
magee-shortcodes
Published
2022-01-17
Title
Magee Shortcodes < 2.0.9 - Reflected Cross-Site Scripting
Slug
magee-shortcodes
Published
2023-09-21
Title
Magee Shortcodes <= 2.1.1 - Contributor+ Stored XSS via shortcode