Extension WordPress

Vulnérabilités Event Registration Calendar By vcita

Cette page rassemble les failles publiées pour Event Registration Calendar By vcita, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
1Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Event Registration Calendar By vcita

3 fiches

CVE-2024-11870 Moyenne · 6,4
Event Registration Calendar By vcita

Event Registration Calendar By vcita <= 1.4.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Event Registration Calendar By vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied…

Versions affectées

*-1.4.0

Correctif

Non indiqué

Publication

14/01/2025

CVE-2023-2407 Moyenne · 6,1
Event Registration Calendar By vcita

Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 – Cross-Site Request Forgery to Stored Cross-Site Scripting

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site Request Forgery. This is due to missing…

Versions affectées

*-1.3.1

Correctif

Non indiqué

Publication

02/06/2023

CVE-2023-2406 Moyenne · 6,4
Event Registration Calendar By vcita

Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the 'email' parameter in…

Versions affectées

*-1.3.1

Correctif

1.4.0

Publication

02/06/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités