Pixelite / Events Manager
26 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-66457 | WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability | HIGH | 7.1 | Aug 6, 2026 |
| CVE-2025-6976 | Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes | MEDIUM | 6.4 | Jul 9, 2025 |
| CVE-2025-6975 | Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter | MEDIUM | 6.1 | Jul 9, 2025 |
| CVE-2025-6970 | Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter | HIGH | 7.5 | Jul 9, 2025 |
| CVE-2025-1249 | WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability | MEDIUM | 5.3 | Feb 26, 2025 |
| CVE-2024-11260 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter | HIGH | 7.5 | Feb 21, 2025 |
| CVE-2024-5889 | Events Manager <= 6.4.8 - Reflected Cross-Site Scripting | MEDIUM | 6.1 | Jun 29, 2024 |
| CVE-2024-3492 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_ca… | MEDIUM | 6.4 | Jun 12, 2024 |
| CVE-2024-30515 | WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability | HIGH | 8.8 | Jun 9, 2024 |
| CVE-2024-30421 | WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 4.3 | Mar 28, 2024 |
| CVE-2024-2110 | Events Manager <= 6.4.7.1 - Cross-Site Request Forgery | MEDIUM | 4.3 | Mar 28, 2024 |
| CVE-2024-2111 | Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Mar 28, 2024 |
| CVE-2024-0614 | Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings | MEDIUM | 4.8 | Mar 13, 2024 |
| CVE-2023-48326 | WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS) | HIGH | 7.1 | Nov 30, 2023 |
| CVE-2020-35037 | Events Manager < 5.9.8 - Cross-Site Scripting (XSS) | MEDIUM | 6.1 | Dec 1, 2021 |
| CVE-2020-35012 | Events Manager < 5.9.8 - Admin+ SQL Injection | HIGH | 7.2 | Dec 1, 2021 |
| CVE-2019-16523 | The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided… | MEDIUM | 5.4 | Oct 16, 2019 |
| CVE-2012-6716 | The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links. | MEDIUM | 6.1 | Aug 22, 2019 |
| CVE-2013-7480 | The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas. | MEDIUM | 6.1 | Aug 22, 2019 |
| CVE-2013-7479 | The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field. | MEDIUM | 6.1 | Aug 22, 2019 |
| CVE-2013-7478 | The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. | MEDIUM | 6.1 | Aug 22, 2019 |
| CVE-2013-7477 | The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. | MEDIUM | 6.1 | Aug 22, 2019 |
| CVE-2015-9297 | The events-manager plugin before 5.6 for WordPress has XSS. | MEDIUM | 6.1 | Aug 13, 2019 |
| CVE-2015-9298 | The events-manager plugin before 5.6 for WordPress has code injection. | CRITICAL | 9.8 | Aug 13, 2019 |
| CVE-2015-9299 | The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS. | MEDIUM | 6.1 | Aug 13, 2019 |
Showing 1 to 25 of 26 CVEs