Extension WordPress
Vulnérabilités WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Cette page rassemble les failles publiées pour WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
11 fiches
WP Event Manager <= 3.1.50 – Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘organizer_name' parameter in all versions up to, and including, 3.1.50 due to insufficient input sanitization…
*-3.1.50
3.1.51
15/07/2025
WP Event Manager <= 3.1.49 – Authenticated (Administrator+) Stored Cross-Site Scripting
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tag-name’ parameter in all versions up to, and including, 3.1.49 due to insufficient input sanitization…
*-3.1.49
3.1.50
10/06/2025
WP Event Manager <= 3.1.51 – Unauthenticated Local File Inclusion
The WP Event Manager plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.1.51. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the…
*-3.1.51
3.2.0
21/05/2025
WP Event Manager <= 3.2.0 – Missing Authorization
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.0. This…
*-3.2.0
3.2.1
04/04/2025
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'events' shortcode in all versions up to, and including, 3.1.43 due to insufficient input…
*-3.1.43
3.1.44
15/07/2024
WP Event Manager <= 3.1.41 – Reflected Cross-Site Scripting via plugin
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the plugin parameter in all versions up to, and including, 3.1.41 due to insufficient input sanitization…
*-3.1.41
3.1.42
23/02/2024
WP Event Manager <= 3.1.41 – Authenticated (Editor+) Stored Cross-Site Scripting
The WP Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access…
*-3.1.41
3.1.42
29/11/2023
WP Event Manager <= 3.1.42 – Cross-Site Scripting
The WP Event Manager plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.1.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-3.1.42
3.1.43
09/11/2023
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 – Authenticated (Admin+) Stored Cross-Site Scripting
The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output…
*-3.1.37.1
3.1.38
20/09/2023
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 – Stored Cross Site Scripting
The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting
[*, 3.1.28)
3.1.28
20/06/2022
WP Event Manager <= 3.1.22 – Admin+ Stored Cross-Site Scripting
The WP Event Manager WordPress plugin before 3.1.23 does not escape some of its Field Editor settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
*-3.1.22
3.1.23
14/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.