Unknown Eventon vulnerabilities

• ashanjay eventon, eventon wordpress plugin wordpress plugin +1 more EventON < 2.2.17 - Admin+ Stored XSS CVE-2024-6910 4.8 MediumSeptember 9, 2024
• ashanjay eventon EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle CVE-2024-4752 5.9 MediumJuly 13, 2024
• ashanjay eventon EventON < 4.4.1 - Reflected Cross-Site Scripting CVE-2023-7200 6.1 MediumJanuary 29, 2024
• unknown eventon-rsvp, myeventon rsvp events +1 more EventON-RSVP < 2.9.5 - Reflected XSS CVE-2023-7170 6.1 MediumJanuary 22, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update CVE-2024-0238 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure CVE-2024-0235 Public exploit EPSS 38.0% 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS CVE-2024-0233 6.1 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting CVE-2023-6005 4.8 MediumJanuary 16, 2024
• ashanjay eventon EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure CVE-2024-0236 5.3 MediumJanuary 16, 2024
• ashanjay eventon, unknown eventon premium +1 more EventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update CVE-2024-0237 5.3 MediumJanuary 16, 2024
• ashanjay eventon EventON < 2.2 - Admin+ Stored HTML Injection CVE-2023-6046 4.8 MediumJanuary 16, 2024
• ashanjay eventon EventON < 2.2 - Admin+ Stored XSS CVE-2023-4388 4.8 MediumOctober 16, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Post Access via IDOR CVE-2023-3219 Public exploit 5.3 MediumJuly 10, 2023
• ashanjay eventon EventON < 2.1.2 - Unauthenticated Event Access CVE-2023-2796 Public exploit EPSS 42.7% 5.3 MediumJuly 10, 2023