Jackdewey vulnerabilities

Products

• Community Events 13
• Link Library 8

Newest

• jackdewey link library Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameter CVE-2026-116537 7.2 HighNovember 7, 2026
• jackdewey community events Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list CVE-2026-86795 5.3 MediumNovember 5, 2026
• jackdewey community events Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form CVE-2026-86794 8.8 HighOctober 29, 2026
• jackdewey link library Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter CVE-2026-15090 7.5 HighOctober 15, 2026
• jackdewey link library Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter CVE-2026-18855 9.1 CriticalAugust 15, 2026
• jackdewey community events Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field CVE-2026-2429 4.9 MediumMarch 7, 2026
• jackdewey community events Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter CVE-2026-1649 4.4 MediumFebruary 18, 2026
• jackdewey events listing widget Events Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field CVE-2026-1252 6.4 MediumFebruary 6, 2026
• jackdewey tune library Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import CVE-2026-1401 6.4 MediumFebruary 6, 2026
• jackdewey community events Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter CVE-2025-14029 5.3 MediumJanuary 17, 2026
• jackdewey community events Community Events <= 1.5.4 - Unauthenticated SQL Injection CVE-2025-12646 7.5 HighNovember 19, 2025
• jackdewey community events Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting CVE-2025-11995 7.2 HighNovember 1, 2025
• jackdewey community events Community Events <= 1.5.1 - Unauthenticated SQL Injection CVE-2025-10586 9.8 CriticalOctober 9, 2025
• jackdewey community events Community Events <= 1.5.1 - Unauthenticated SQL Injection CVE-2025-10587 9.8 CriticalOctober 8, 2025
• jackdewey link library Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters CVE-2025-2889 6.4 MediumApril 4, 2025
• jackdewey bilingual linker Bilingual Linker <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13441 6.4 MediumJanuary 25, 2025
• jackdewey link library Link Library <= 7.7.2 - Reflected Cross-Site Scripting CVE-2024-13404 6.1 MediumJanuary 21, 2025
• community events project events, jackdewey community events +1 more Community Events < 1.5.1 - Admin+ Stored XSS CVE-2024-6270 4.8 MediumAugust 5, 2024
• community events project events, jackdewey community events +1 more Community Events < 1.5 - Event Deletion via CSRF CVE-2024-6271 5.4 MediumJuly 22, 2024
• jackdewey link library Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode CVE-2024-4281 6.4 MediumMay 8, 2024
• jackdewey link library Link Library <= 7.6.6 - Reflected Cross-Site Scripting CVE-2024-2325 6.1 MediumApril 9, 2024
• jackdewey link library Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-1559 6.5 MediumFebruary 20, 2024
• community events project events, jackdewey community events +1 more WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS) CVE-2022-44742 4.8 MediumMarch 23, 2023
• community events project events, jackdewey community events +1 more Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS) CVE-2021-24496 6.1 MediumAugust 2, 2021