Pixelite vulnerabilities

Products

• Events Manager 26
• Events Manager 19
• Login With Ajax 4

Newest

• pixelite events manager WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-114694 7.1 HighOctober 24, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability CVE-2026-42689 3.7 LowOctober 12, 2026
• marcus events manager WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability CVE-2026-42633 8.5 HighOctober 10, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability CVE-2026-105068 5.3 MediumOctober 5, 2026
• pixelite events manager Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter CVE-2026-93662 4.3 MediumSeptember 24, 2026
• pixelite events manager Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR CVE-2026-93661 Public exploit 2.7 LowSeptember 24, 2026
• marcus login with ajax WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-82883 7.1 HighSeptember 2, 2026
• marcus (aka @msykes) login with ajax WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66640 6.5 MediumAugust 18, 2026
• pixelite events manager Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator CVE-2026-18366 Public exploit 9.8 CriticalAugust 12, 2026
• pixelite events manager Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection CVE-2026-18057 8.1 HighAugust 12, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-66457 7.1 HighAugust 6, 2026
• pixelite events manager Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads CVE-2026-18050 7.5 HighAugust 6, 2026
• pixelite events manager Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration CVE-2026-12987 7.5 HighJuly 22, 2026
• marcus (aka @msykes) events manager WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability CVE-2026-57713 8.8 HighJuly 13, 2026
• drupal responsive favicons Responsive Favicons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-019 CVE-2026-3218 Fix available 4.8 MediumFebruary 25, 2026
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes CVE-2025-6976 6.4 MediumJuly 9, 2025
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter CVE-2025-6975 6.1 MediumJuly 9, 2025
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter CVE-2025-6970 Public exploit EPSS 56.4% 7.5 HighJuly 9, 2025
• marcus (aka @msykes) events manager WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability CVE-2025-1249 5.3 MediumFebruary 26, 2025
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter CVE-2024-11260 7.5 HighFebruary 21, 2025
• marcus (aka @msykes) login with ajax WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability CVE-2023-49859 4.3 MediumDecember 9, 2024
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager <= 6.4.8 - Reflected Cross-Site Scripting CVE-2024-5889 6.1 MediumJune 29, 2024
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes CVE-2024-3492 6.4 MediumJune 12, 2024
• pixelite events manager WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability CVE-2024-30515 4.3 MediumJune 9, 2024
• pixelite login with ajax WordPress Login With Ajax plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30546 4.3 MediumApril 15, 2024
• pixelite events manager WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30421 4.3 MediumMarch 28, 2024
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager <= 6.4.7.1 - Cross-Site Request Forgery CVE-2024-2110 4.3 MediumMarch 28, 2024
• netweblogic meta tag manager Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection CVE-2024-1770 8.8 HighMarch 28, 2024
• netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2111 6.4 MediumMarch 28, 2024
• pixelite events manager, netweblogic events manager – calendar, bookings, tickets, and more! +1 more Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings CVE-2024-0614 4.4 MediumMarch 13, 2024
• pixelite events manager WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-48326 7.1 HighNovember 30, 2023
• marcus (aka @msykes) wp fullcalendar WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access CVE-2022-3891 5.3 MediumFebruary 13, 2023
• pixelite events manager Events Manager < 5.9.8 - Cross-Site Scripting (XSS) CVE-2020-35037 6.1 MediumDecember 1, 2021
• pixelite events manager Events Manager < 5.9.8 - Admin+ SQL Injection CVE-2020-35012 7.2 HighDecember 1, 2021
• pixelite events manager The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to... CVE-2019-16523 5.4 MediumOctober 16, 2019
• pixelite events manager The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links. CVE-2012-6716 6.1 MediumAugust 22, 2019
• pixelite events manager The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. CVE-2013-7480 6.1 MediumAugust 22, 2019
• pixelite events manager The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. CVE-2013-7479 6.1 MediumAugust 22, 2019
• pixelite events manager The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. CVE-2013-7478 6.1 MediumAugust 22, 2019
• pixelite events manager The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. CVE-2013-7477 6.1 MediumAugust 22, 2019
• pixelite events manager The events-manager plugin before 5.6 for WordPress has XSS. CVE-2015-9297 6.1 MediumAugust 13, 2019
• pixelite events manager The events-manager plugin before 5.6 for WordPress has code injection. CVE-2015-9298 9.8 CriticalAugust 13, 2019
• pixelite events manager The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS. CVE-2015-9299 6.1 MediumAugust 13, 2019
• pixelite events manager The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues. CVE-2015-9300 6.1 MediumAugust 13, 2019
• pixelite events manager The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body... CVE-2018-13137 4.8 MediumApril 12, 2019
• netweblogic events manager Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress... CVE-2018-0576 5.4 MediumMay 14, 2018
• pixelite events manager The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js... CVE-2018-9020 5.4 MediumMarch 26, 2018