Skip to content
Netweblogic vulnerabilities
Newest
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes
CVE-2025-14945
5.4 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys
CVE-2026-14280
6.6 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter
CVE-2026-17089
Public exploit
6.1 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters
CVE-2026-10627
5.3 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action
CVE-2026-15023
6.5 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
CVE-2025-12976
6.4 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion
CVE-2025-12407
4.3 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
CVE-2025-12408
5.3 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
CVE-2025-6976
6.4 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter
CVE-2025-6975
6.1 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
CVE-2025-6970
Public exploit
EPSS 56.4%
7.5 High
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
CVE-2024-11260
7.5 High
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.8 - Reflected Cross-Site Scripting
CVE-2024-5889
6.1 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
CVE-2024-3492
6.4 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.7.1 - Cross-Site Request Forgery
CVE-2024-2110
4.3 Medium
-
netweblogic meta tag manager
Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection
CVE-2024-1770
8.8 High
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2111
6.4 Medium
-
pixelite events manager, netweblogic events manager – calendar, bookings, tickets, and more! +1 more
Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
CVE-2024-0614
4.4 Medium
-
netweblogic events manager
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress...
CVE-2018-0576
5.4 Medium
-
netweblogic events manager, events manager pro +1 more
Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and...
CVE-2013-1407
4.3 Medium
-
netweblogic login with ajax
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for...
CVE-2013-2707
6.8 Medium
-
netweblogic login with ajax
Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for...
CVE-2012-4283
4.3 Medium
-
netweblogic login with ajax
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login...
CVE-2012-2759
4.3 Medium