Skip to content
Wp-eventmanager vulnerabilities
Newest
-
wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 more
WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2025-2799
4.4 Medium
-
wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 more
WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
CVE-2025-2800
7.2 High
-
wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 more
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
CVE-2024-2691
6.4 Medium
-
unknown wp user profile avatar, wp event manager user profile avatar +1 more
WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS
CVE-2023-6067
5.4 Medium
-
wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 more
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
CVE-2024-0976
6.1 Medium
-
wp event manager user profile avatar, wp-eventmanager wp event manager +1 more
WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-52118
6.5 Medium
-
unknown wp user profile avatar, wp event manager user profile avatar +1 more
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
CVE-2023-6384
4.3 Medium
-
wp event manager – events calendar, registrations, sell tickets with woocommerce, wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +2 more
WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49181
5.9 Medium
-
wp event manager – events calendar, registrations, sell tickets with woocommerce, wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +2 more
WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47697
7.1 High
-
wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 more
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-4423
4.4 Medium
-
wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 more
WP Event Manager < 3.1.28 - Reflected Cross-Site Scripting
CVE-2022-1474
6.1 Medium
-
wp-eventmanager wp event manager, unknown wp event manager – easily build your calendar of events! +1 more
WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting
CVE-2021-24810
4.8 Medium
-
unknown event banner
Event Banner <= 1.3 - Arbitrary File Upload to RCE
CVE-2021-24252
7.2 High