Fullworks vulnerabilities

Products

• Quick Event Manager 9
• Quick Paypal Payments 9
• Display Eventbrite Events 4
• Quick Contact Form 3

Newest

• fullworks quick event manager Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter CVE-2026-121636 5.3 MediumNovember 6, 2026
• fullworks quick event manager Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download CVE-2026-82214 5.3 MediumOctober 31, 2026
• fullworks quick paypal payments: payment button & form Quick PayPal Payments: Payment Button & Form <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute CVE-2026-110017 6.4 MediumOctober 16, 2026
• fullworks quick paypal payments WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability CVE-2026-108492 5.3 MediumOctober 13, 2026
• brightvesseldev quick event manager WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability CVE-2026-84848 7.1 HighSeptember 3, 2026
• brightvesseldev quick event manager WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability CVE-2026-84847 7.5 HighSeptember 3, 2026
• fullworks quick paypal payments Quick PayPal Payments <= 5.7.50 - Unauthenticated Payment Bypass via PayPal IPN CVE-2026-17008 5.3 MediumAugust 12, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• fullworks display eventbrite events WordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability CVE-2026-39535 5.3 MediumApril 8, 2026
• fullworks quick paypal payments WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-27003 4.3 MediumSeptember 5, 2025
• fullworks display eventbrite events WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability CVE-2025-47510 7.5 HighMay 7, 2025
• fullworks quick event manager WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability CVE-2023-23975 5.3 MediumDecember 9, 2024
• fullworks quick contact form WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability CVE-2023-25035 6.5 MediumDecember 9, 2024
• fullworks quick paypal payments WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability CVE-2023-25714 7.5 HighDecember 9, 2024
• fullworks simple shortcode for google maps Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-10621 6.4 MediumNovember 8, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• fullworks quick paypal payments Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS CVE-2023-1554 4.8 MediumMay 2, 2023
• fullworks quick paypal payments WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23889 6.5 MediumApril 25, 2023
• fullworks quick contact form WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47608 5.9 MediumApril 25, 2023
• fullworks quick paypal payments WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25713 7.1 HighApril 7, 2023
• fullworks quick paypal payments WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25702 5.9 MediumApril 7, 2023
• fullworks quick contact form WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23885 6.5 MediumApril 7, 2023
• fullworks quick event manager WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23979 7.1 HighApril 6, 2023
• fullworks quick event manager WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-46863 5.9 MediumMarch 28, 2023
• fullworks quick event manager WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23974 5.4 MediumMarch 1, 2023
• fullworksplugins meet my team, fullworks meet my team (wordpress plugin) +1 more WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-37339 4.1 MediumSeptember 23, 2022