Skip to contentJackdewey Community Events vulnerabilities
- jackdewey community eventsCommunity Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_listCVE-2026-867955.3 Medium
- jackdewey community eventsCommunity Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission FormCVE-2026-867948.8 High
- jackdewey community eventsCommunity Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV FieldCVE-2026-24294.9 Medium
- jackdewey community eventsCommunity Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' ParameterCVE-2026-16494.4 Medium
- jackdewey community eventsCommunity Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' ParameterCVE-2025-140295.3 Medium
- jackdewey community eventsCommunity Events <= 1.5.4 - Unauthenticated SQL InjectionCVE-2025-126467.5 High
- jackdewey community eventsCommunity Events <= 1.5.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-119957.2 High
- jackdewey community eventsCommunity Events <= 1.5.1 - Unauthenticated SQL InjectionCVE-2025-105869.8 Critical
- jackdewey community eventsCommunity Events <= 1.5.1 - Unauthenticated SQL InjectionCVE-2025-105879.8 Critical
- community events project events, jackdewey community events +1 moreCommunity Events < 1.5.1 - Admin+ Stored XSSCVE-2024-62704.8 Medium
- community events project events, jackdewey community events +1 moreCommunity Events < 1.5 - Event Deletion via CSRFCVE-2024-62715.4 Medium
- community events project events, jackdewey community events +1 moreWordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)CVE-2022-447424.8 Medium
- community events project events, jackdewey community events +1 moreCommunity Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)CVE-2021-244966.1 Medium