wp-events-plugin vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

The events-manager plugin prior to 5.5.2 for WordPress has XSS in the booking form.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.5 for WordPress has XSS via EM_Ticket::get_post.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.3.9 for WordPress has XSS in the search form field.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

Wp-events-plugin Events Manager

3.5

CVSSv2

The events-manager plugin up to and including 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.1.7 for WordPress has XSS via JSON call links.

Wp-events-plugin Events Manager

3.5

CVSSv2

Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Wp-events-plugin Events Manager

NA

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a up to and including 6.4.5.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.6 for WordPress has XSS.

Wp-events-plugin Events Manager

4.3

CVSSv2

The events-manager plugin prior to 5.5.7.1 for WordPress has DOM XSS.

Wp-events-plugin Events Manager

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook