Skip to content
Pixelite Events Manager vulnerabilities
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
CVE-2025-6976
6.4 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter
CVE-2025-6975
6.1 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
CVE-2025-6970
Public exploit
EPSS 56.4%
7.5 High
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
CVE-2024-11260
7.5 High
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.8 - Reflected Cross-Site Scripting
CVE-2024-5889
6.1 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
CVE-2024-3492
6.4 Medium
-
pixelite events manager
WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability
CVE-2024-30515
4.3 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.7.1 - Cross-Site Request Forgery
CVE-2024-2110
4.3 Medium
-
netweblogic events manager – calendar, bookings, tickets, and more!, pixelite events manager +1 more
Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2111
6.4 Medium
-
pixelite events manager, netweblogic events manager – calendar, bookings, tickets, and more! +1 more
Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
CVE-2024-0614
4.4 Medium
-
pixelite events manager
WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-48326
7.1 High
-
pixelite events manager
Events Manager < 5.9.8 - Cross-Site Scripting (XSS)
CVE-2020-35037
6.1 Medium
-
pixelite events manager
Events Manager < 5.9.8 - Admin+ SQL Injection
CVE-2020-35012
7.2 High
-
pixelite events manager
The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to...
CVE-2019-16523
5.4 Medium
-
pixelite events manager
The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.
CVE-2012-6716
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.
CVE-2013-7480
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.
CVE-2013-7479
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.
CVE-2013-7478
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.
CVE-2013-7477
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.6 for WordPress has XSS.
CVE-2015-9297
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.6 for WordPress has code injection.
CVE-2015-9298
9.8 Critical
-
pixelite events manager
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
CVE-2015-9299
6.1 Medium
-
pixelite events manager
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
CVE-2015-9300
6.1 Medium
-
pixelite events manager
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body...
CVE-2018-13137
4.8 Medium
-
netweblogic events manager
Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress...
CVE-2018-0576
5.4 Medium
-
pixelite events manager
The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js...
CVE-2018-9020
5.4 Medium