Skip to contentUnknown Events Made Easy vulnerabilities
- franky events made easyWordPress Events Made Easy plugin <= 3.3.5 - Content Injection vulnerabilityCVE-2026-1242555.3 Medium
- liedekef events made easyEvents Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode AttributeCVE-2026-1186346.4 Medium
- liedekef events made easyEvents Made Easy <= 3.2.22 - Unauthenticated Stored Cross-Site Scripting via 'event[location_name]' ParameterCVE-2026-1076495.4 Medium
- franky events made easyWordPress Events Made Easy plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-281627.1 High
- liedekef events made easyEvents Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event PropertyCVE-2026-759637.5 High
- unknown events made easyEvents Made Easy < 3.1.2 - Unauthenticated Payment BypassCVE-2026-148425.3 Medium
- unknown events made easyEvents Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDORCVE-2026-148435.3 Medium
- franky events made easyWordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerabilityCVE-2026-595576.5 Medium
- e-dynamics events made easyEvents Made Easy <= 2.3.16 - Missing AuthorizationCVE-2023-04045.4 Medium
- e-dynamics events made easyEvents Made Easy < 2.2.81 - Unauthenticated SQLiCVE-2022-1905EPSS 37.1%9.8 Critical
- e-dynamics events made easyEvents Made Easy < 2.2.36 - Subscriber+ SQL InjectionCVE-2021-250308.8 High
- e-dynamics events made easyEvents Made Easy < 2.2.24 - Admin+ Stored Cross-Site ScriptingCVE-2021-248134.8 Medium