Latest wp-events-plugin events manager Vulnerabilities

● CVE-2023-48326

WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

Wp-events-plugin Events Manager<=6.4.5

● CVE-2020-35037

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

Wp-events-plugin Events Manager<5.9.8

● CVE-2020-35012

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection

Wp-events-plugin Events Manager<5.9.8

● CVE-2019-16523

The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes...

Wp-events-plugin Events Manager<=5.9.5

● CVE-2012-6716

The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

Wp-events-plugin Events Manager<5.1.7

● CVE-2013-7480

The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

Wp-events-plugin Events Manager<5.3.6.1

● CVE-2013-7479

The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

Wp-events-plugin Events Manager<5.3.9

● CVE-2013-7478

The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

Wp-events-plugin Events Manager<5.5

● CVE-2013-7477

The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

Wp-events-plugin Events Manager<5.5.2

● CVE-2015-9299

The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

Wp-events-plugin Events Manager<5.5.7.1

● CVE-2015-9300

The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

Wp-events-plugin Events Manager<5.5.7

● CVE-2015-9297

The events-manager plugin before 5.6 for WordPress has XSS.

Wp-events-plugin Events Manager<5.6

● CVE-2015-9298

The events-manager plugin before 5.6 for WordPress has code injection.

Wp-events-plugin Events Manager<5.6

● CVE-2018-13137

The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.

Wp-events-plugin Events Manager=5.9.4

● CVE-2018-0576

Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Wp-events-plugin Events Manager<5.9

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.