Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.0 views

CVE-2026-32354

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.0 views

EUVD-2026-15685

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected XSS.This issue affects WpEvently: from n/a through = 5.1.4...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.0 views

CVE-2026-25361 WordPress WpEvently plugin <= 5.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magepeopleteam WpEvently mage-eventpress allows Reflected XSS.This issue affects WpEvently: from n/a through = 5.1.4...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.3 views

CVE-2026-25361

CVE-2026-25361 affects the WordPress plugin set described in the provided documents as a reflection-based cross-site scripting issue. The Initial Description states a Reflected XSS in magepeopleteam WpEvently mage-eventpress, impacting WpEvently versions from n/a through

7.1CVSS5.8AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-27922

Name of the Vulnerable Software and Affected Versions WpEvently versions through 5.1.4 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the execution of malicious...

7.1CVSS6.1AI score0.00045EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/13 9:31 p.m.2 views

EUVD-2026-11842

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.8AI score0.00041EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.1 views

CVE-2026-32354

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.3CVSS0.00041EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 11:41 a.m.4 views

CVE-2026-32354

The CVE-2026-32354 entry concerns the WordPress plugin WpEvently mage-eventpress. Affected software: mage-eventpress (WordPress plugin) with versions

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:41 a.m.1 views

CVE-2026-32354

Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retrieve Embedded Sensitive Data.This issue affects WpEvently: from n/a through 5.1.9...

5.8AI score0.00041EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.0 views

CVE-2026-22394

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through = 1.7...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.2 views

EUVD-2026-9533

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through = 1.7...

5.9AI score0.00172EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.3 views

CVE-2026-22394

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through = 1.7...

8.1CVSS0.00172EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.5 views

CVE-2026-22394

CVE-2026-22394 is a Local File Inclusion vulnerability in Mikado-Themes Evently WordPress Theme (Evently) up to version 1.7. Described as Improper Control of Filename for Include/Require Statement, it enables PHP Local File Inclusion via the Evently include/require mechanism. Public records list ...

8.1CVSS5.9AI score0.00172EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.0 views

CVE-2026-22394 WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through = 1.7...

5.8AI score0.00172EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.25 views

CVE-2026-22394 WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through = 1.7...

8.1CVSS0.00172EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.2 views

PT-2026-23154

Name of the Vulnerable Software and Affected Versions Mikado-Themes Evently versions through 1.7 Description The Evently software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

5.8AI score0.00172EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin Evently 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00172EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/25 8:25 a.m.4 views

WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Evently versions = 1.7...

8.1CVSS5.9AI score0.00172EPSS
Exploits0Affected Software1
NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-23549

Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through = 5.1.1...

9.8CVSS0.00061EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.2 views

CVE-2026-23549 WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through = 5.1.1...

9.8CVSS5.5AI score0.00061EPSS
Exploits0References1
Rows per page
Query Builder