Pixelite Events Manager vulnerabilities

• pixelite events manager WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-114694 7.1 HighOctober 24, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability CVE-2026-42689 3.7 LowOctober 12, 2026
• marcus events manager WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability CVE-2026-42633 8.5 HighOctober 10, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability CVE-2026-105068 5.3 MediumOctober 5, 2026
• pixelite events manager Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter CVE-2026-93662 4.3 MediumSeptember 24, 2026
• pixelite events manager Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR CVE-2026-93661 Public exploit 2.7 LowSeptember 24, 2026
• pixelite events manager Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator CVE-2026-18366 Public exploit 9.8 CriticalAugust 12, 2026
• pixelite events manager Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection CVE-2026-18057 8.1 HighAugust 12, 2026
• pixelite events manager WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-66457 7.1 HighAugust 6, 2026
• pixelite events manager Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads CVE-2026-18050 7.5 HighAugust 6, 2026
• pixelite events manager Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injection in Booking Registration CVE-2026-12987 7.5 HighJuly 22, 2026
• marcus (aka @msykes) events manager WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability CVE-2026-57713 8.8 HighJuly 13, 2026
• marcus (aka @msykes) events manager WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability CVE-2025-1249 5.3 MediumFebruary 26, 2025
• pixelite events manager WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability CVE-2024-30515 4.3 MediumJune 9, 2024
• pixelite events manager WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30421 4.3 MediumMarch 28, 2024
• pixelite events manager WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-48326 7.1 HighNovember 30, 2023
• pixelite events manager Events Manager < 5.9.8 - Cross-Site Scripting (XSS) CVE-2020-35037 6.1 MediumDecember 1, 2021
• pixelite events manager Events Manager < 5.9.8 - Admin+ SQL Injection CVE-2020-35012 7.2 HighDecember 1, 2021
• netweblogic events manager Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress... CVE-2018-0576 5.4 MediumMay 14, 2018