Skip to content

Theeventscalendar vulnerabilities

Products

Newest

stellarwp event tickets and registration Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' Parameter CVE-2026-97634 6.5 MediumOctober 2, 2026
stellarwp event tickets and registration Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update CVE-2026-3174 7.5 HighSeptember 8, 2026
theeventscalendar event tickets and registration Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR CVE-2026-14823 2.2 LowAugust 1, 2026
theeventscalendar event tickets and registration Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation CVE-2026-14822 5.3 MediumAugust 1, 2026
theeventscalendar event tickets and registration Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move CVE-2026-14819 3.5 LowJuly 28, 2026
stellarwp event tickets and registration Event Tickets and Registration <= 5.26.5 - Unauthenticated Ticket Payment Bypass CVE-2025-11517 7.5 HighOctober 18, 2025
stellarwp event tickets and registration, theeventscalendar event tickets +1 more Event Tickets and Registration <= 5.19.1.1 - Missing Authorization to Ticket Deletion CVE-2025-1402 5.3 MediumFebruary 21, 2025
liquidweb event tickets, stellarwp event tickets and registration +1 more Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure CVE-2024-13457 5.3 MediumJanuary 30, 2025
stellarwp the events calendar The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12118 6.4 MediumJanuary 23, 2025
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
stellarwp the events calendar The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scripting CVE-2024-6931 EPSS 16.7% 7.2 HighSeptember 27, 2024
stellarwp the events calendar The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection CVE-2024-8275 Public exploit EPSS 49.9% 9.8 CriticalSeptember 25, 2024
theeventscalendar events calendar pro, the events calendar pro +1 more The Events Calendar Pro <= 7.0.2 - Authenticated (Administrator+) PHP Object Injection to Remote Code Execution CVE-2024-8016 9.1 CriticalAugust 30, 2024
stellarwp the events calendar, unknown events-calendar-pro, theeventscalendar events calendar pro +2 more The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access CVE-2024-1295 6.5 MediumJune 14, 2024
stellarwp event tickets and registration Event Tickets and Registration <= 5.8.2 - Improper Authorization to Information Disclosure CVE-2024-2261 4.3 MediumApril 9, 2024
liquidweb event tickets, theeventscalendar event tickets and registration, unknown events tickets plus +1 more +3 more Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access CVE-2024-1316 6.5 MediumMarch 4, 2024
liquidweb event tickets, stellarwp event tickets and registration +1 more Event Tickets and Registration <= 5.8.1 - Missing Authorization CVE-2024-1053 4.3 MediumFebruary 22, 2024
theeventscalendar eventcalendar Event Calendar < 1.1.51 - Reflected Cross-Site Scripting CVE-2021-25024 6.1 MediumJanuary 17, 2022
theeventscalendar eventcalendar Event Calendar < 1.1.51 - Subscriber+ Event Creation CVE-2021-25025 4.3 MediumJanuary 17, 2022
theeventscalendar eventbrite tickets Cross-site scripting (XSS) vulnerability in the Event Import page (import-eventbrite-events.php)... CVE-2015-5485 4.3 MediumAugust 18, 2015