Skip to contentNetweblogic Events Manager vulnerabilities
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event AttributesCVE-2025-149455.4 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array KeysCVE-2026-142806.6 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' ParameterCVE-2026-17089Public exploit6.1 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' ParametersCVE-2026-106275.3 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate ActionCVE-2026-150236.5 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' ShortcodeCVE-2025-129766.4 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location DeletionCVE-2025-124074.3 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!Events Manager <= 7.2.2.2 - Unauthenticated Information ExposureCVE-2025-124085.3 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin ShortcodesCVE-2025-69766.4 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvent Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` ParameterCVE-2025-69756.1 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` ParameterCVE-2025-6970Public exploitEPSS 56.4%7.5 High
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status ParameterCVE-2024-112607.5 High
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 6.4.8 - Reflected Cross-Site ScriptingCVE-2024-58896.1 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category ShortcodesCVE-2024-34926.4 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 6.4.7.1 - Cross-Site Request ForgeryCVE-2024-21104.3 Medium
- netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 moreEvents Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-21116.4 Medium
- pixelite events manager, netweblogic events manager – calendar, bookings, tickets, and more! +1 moreEvents Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settingsCVE-2024-06144.4 Medium
- netweblogic events managerCross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress...CVE-2018-05765.4 Medium