WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-event-solution
Published
2024-12-19
Title
Eventin < 4.0.9 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-02-23
Title
Eventin < 4.0.21 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-03-19
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-03-19
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.25 - Missing Authorization to Unauthenticated Payment Status Update
Slug
wp-event-solution
Published
2025-04-16
Title
Eventin < 4.0.26 - Authenticated (Contributor+) Local File Inclusion
Slug
wp-event-solution
Published
2025-05-07
Title
Event Manager, Events Calendar, Tickets, Registrations – Eventin < 4.0.27 - Unauthenticated Arbitrary File Read
Slug
wp-event-solution
Published
2025-05-07
Title
Eventin < 4.0.27 - Missing Authorization to Unauthenticated Privilege Escalation
Slug
wp-event-solution
Published
2025-06-23
Title
Eventin < 4.0.29 - Reflected Cross-Site Scripting
Slug
wp-event-solution
Published
2025-08-08
Title
Eventin < 4.0.35 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Slug
wp-event-solution
Published
2025-08-13
Title
Eventin < 4.0.32 - Authenticated (Contributor+) PHP Object Injection
Slug
wp-event-solution
Published
2025-08-22
Title
Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin < 4.0.38 - Unauthenticated Server-Side Request Forgery
Slug
wp-event-solution
Published
2026-01-08
Title
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) < 4.0.52 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Slug
wp-event-solution
Published
2026-01-22
Title
Eventin < 4.1.4 - Authenticated (Contributor+) PHP Object Injection
Slug
wp-event-solution
Published
2026-04-13
Title
Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) < 4.1.9 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure
Slug
wp-eventpress
Published
2024-11-08
Title
EventPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-events
Published
2017-11-03
Title
Events <= 2.3.4 - Authenticated SQL Injection
Slug
wp-events-manager
Published
2024-08-30
Title
WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection
Slug
wp-events-manager
Published
2025-09-22
Title
WP Events Manager < 2.2.2 - Missing Authorization
Slug
wp-ever-accounting
Published
2025-04-16
Title
Ever Accounting < 2.1.6 - Cross-Site Request Forgery
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.17 - Contributor+ Stored XSS
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.15 - Multiple CSRF
Slug
wp-expand-tabs-free
Published
2023-12-28
Title
WP Tabs < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-expand-tabs-free
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Slug
wp-expand-tabs-free
Published
2025-05-16
Title
WP Tabs < 2.2.13 - Admin+ PHP Object Injection
Slug
wp-experiments-free
Published
2022-03-07
Title
Title Experiments Free < 9.0.1 - Unauthenticated SQLi