CVE Browser

WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete

WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter

Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter

WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability

Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion…

Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint

Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter

WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability

WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability

WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability

WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability

Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API

Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter

WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API

WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability

WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability

WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability

WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability

WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability