Skip to content

Liquidweb vulnerabilities

Products

Newest

liquidweb give tributes Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter CVE-2026-19658 Public exploit 9.8 CriticalSeptember 22, 2026
liquidweb restrict content, stellarwp membership plugin – restrict content +1 more Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure CVE-2025-14844 8.2 HighJanuary 16, 2026
liquidweb event tickets, stellarwp event tickets and registration +1 more Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure CVE-2024-13457 5.3 MediumJanuary 30, 2025
liquidweb restrict content, stellarwp membership plugin – restrict content +1 more Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11090 5.3 MediumJanuary 26, 2025
givewp WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability CVE-2024-37099 10.0 CriticalAugust 19, 2024
liquidweb restrict content WordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability CVE-2024-31432 5.3 MediumApril 15, 2024
liquidweb event tickets, unknown events tickets plus +1 more Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure CVE-2024-1319 4.3 MediumMarch 4, 2024
liquidweb event tickets, theeventscalendar event tickets and registration, unknown events tickets plus +1 more +3 more Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access CVE-2024-1316 6.5 MediumMarch 4, 2024
liquidweb event tickets, stellarwp event tickets and registration +1 more Event Tickets and Registration <= 5.8.1 - Missing Authorization CVE-2024-1053 4.3 MediumFebruary 22, 2024
liquidweb restrict content, stellarwp membership plugin – restrict content +1 more WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure CVE-2023-47668 Public exploit 5.3 MediumNovember 23, 2023
liquidweb restrict content, unknown membership plugin +1 more Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS CVE-2023-3182 6.1 MediumJuly 17, 2023
ithemes wpcomplete WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45825 7.1 HighMarch 28, 2023
liquidweb event tickets CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists... CVE-2019-16120 8.8 HighSeptember 8, 2019