WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter vulnerability

Unauthenticated SQL Injection via Event Status Parameter vulnerability discovered by mikemyers in WordPress Plugin Events Manager versions = 6.6.3...

CVE-2025-21106

creationtimestamp| type| source ---|---|--- 2025-02-20 14:49:29+00:00| seen| https://t.me/cvedetector/18538 2025-02-20 23:26:54+00:00| seen| Telegram/7h3t7Cck5QFt5yxkv-pb8DB98oTT1-0QQa5UEd0kYGoZ-d83...

CVE-2024-13802

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13802

CVE-2024-13802 – Bandsintown Events plugin for WordPress : All versions up to 1.3.1 are affected by a Stored XSS in the bandsintown_events shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher, enabling inje...

CVE-2024-13802 Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13802 Bandsintown Events <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Bandsintown Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bandsintownevents' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-23020

creationtimestamp| type| source ---|---|--- 2025-02-20 06:27:33+00:00| seen| https://t.me/cvedetector/18513 2025-02-20 23:26:53+00:00| seen| Telegram/E9-kEbHFbfaC6XAaSbtdUU03-EjIf2YrG18E7mu8pQpvVZu...

WordPress plugin Bandsintown Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-7393 · WordPress · Bandsintown Events

Name of the Vulnerable Software and Affected Versions: Bandsintown Events plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'bandsintown events' shortcode due to insufficient input sanitization and output...

WordPress Bandsintown Events plugin <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Bandsintown Events versions = 1.3.1...

CVE-2024-13626

creationtimestamp| type| source ---|---|--- 2025-02-17 06:02:43+00:00| seen| https://infosec.exchange/users/cve/statuses/114017708471446669 2025-02-17 06:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3uaywwa2t 2025-02-17 08:11:01+00:00| seen|...

GHSA-7G7F-62CF-Q66H

creationtimestamp| type| source ---|---|--- 2025-02-17 00:19:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4615 2025-02-17 00:20:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4620 2025-02-17 00:21:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4625 2025-02-17 00:22:16+00:00...

CVE-2024-4325

creationtimestamp| type| source ---|---|--- 2025-02-17 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-17 2025-03-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-29 2025-06-25 21:02:19+00:00| seen|...

CVE-2024-27277

creationtimestamp| type| source ---|---|--- 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| seen| Telegram/K8sarjCI4lpJelkAiX3cWLIsbPAN6jAT0RANo8hIHsWipQsW...

CVE-2024-27962

creationtimestamp| type| source ---|---|--- 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| seen| Telegram/Zy9FksuivDt43U9DSOvQcHwg19HmjThfQmk1O5GtdjrBsaM...

WordPress Events Planner Plugin <= 1.3.10 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Events Planner versions = 1.3.10...

CVE-2023-25210

creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:10+00:00| seen| Telegram/9ojqvI1B8jxxiMA6AprG9EBVpeF3n0IBWDbTEnfGsObiNzKW 2025-02-14 10:08:10+00:00| seen| Telegram/pBik146ZeNjgsWveuyuh1Q6JdyyQm1OHBqzsu2BkrUxnnTPg...

CVE-2023-1582

creationtimestamp| type| source ---|---|--- 2025-02-14 10:06:10+00:00| seen| Telegram/t3TK-tPA-pkBjudpM2Ujdphj5zaObyFkaHyyzclg0yA5U9Z 2025-02-14 10:08:09+00:00| seen| Telegram/n2zjLLvHTE7KzI-Q1xxm2x8XACADauIo8NQufT8etzUj...

CVE-2008-1104

creationtimestamp| type| source ---|---|--- 2025-02-14 10:00:30+00:00| seen| Telegram/9hWNtUgCkSlmuFM74JGegYdh6v77GMOUobVcXNNji5i72ed- 2025-03-08 04:34:56+00:00| seen| Telegram/pI8S6ayohxQ4zR9VKc1xFdhDE88P2VM1CRs616vVbvFEo0k7...

CVE-2022-24810

creationtimestamp| type| source ---|---|--- 2025-02-14 10:00:29+00:00| seen| Telegram/2tJW3ZhD-QepNutXy0Dz7RhwSRBE2yEaEOJ-G915CDVrTnv 2025-02-14 10:04:01+00:00| seen| Telegram/12lwilX95OzDQBXJgmlXrvQcAy457n4W2KnDYTVnJIbSa0...