Extension WordPress
Vulnérabilités Event Espresso – Event Registration & Ticketing Sales
Cette page rassemble les failles publiées pour Event Espresso – Event Registration & Ticketing Sales, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Event Espresso – Event Registration & Ticketing Sales
5 fiches
Event Espresso 4 Decaf <= 5.0.37.decaf – Missing Authorization to Unauthenticated Settings Change
The Event Espresso – Event Registration & Ticketing Sales plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.0.37.decaf. This makes it possible…
* – 5.0.37.decaf
5.0.53.decaf
15/01/2026
Event Espresso 4 Decaf <= 5.0.28.decaf – Cross-Site Request Forgery
The Event Espresso 4 Decaf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.0.28.decaf. This is due to missing or incorrect nonce validation on a function. This makes it possible for…
* – 5.0.28.decaf
5.0.31.decaf
30/12/2024
Event Espresso 4 Decaf – Event Registration Event Ticketing <= 4.10.46.decaf- Authenticated (Subscriber+) Missing Authorization to Limited Plugin Settings Modification
The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some other functions in all versions up…
* – 4.10.46.decaf
5.0.22.decaf
20/08/2024
Event Espresso 4 Decaf <= 4.10.44.decaf – Feature Bypass
The Event Espresso 4 Decaf plugin for WordPress is vulnerable to bypass of a plugin feature in versions up to, and including, 4.10.44.decaf. This is due to incorrect validation of the number of tickets ordered per order when…
* – 4.10.44.decaf
4.10.45.decaf
05/03/2023
Event Espresso 4 Decaf <= 4.10.11 – Cross-Site Request Forgery Bypass
The Event Espresso 4 Decaf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.11. This is due to missing or incorrect nonce validation on the ajaxHandler() function. This makes it possible…
*-4.10.11
4.10.12
16/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.