CVE-2025-69045: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents for WooCommerce: from n/a through = 1.20.4...

WordPress Plugin FooEvents for WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-6000: Improper Authorization

The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'displayticketthemespage' function in versions up to, and including, 1.19.20. This makes it possible for authenticated attackers with...

PT-2024-37304

Name of the Vulnerable Software and Affected Versions: FooEvents for WooCommerce plugin for WordPress versions up to, and including, 1.19.20 Popup Builder plugin version 4.2.3 and older Description: The issue allows authenticated attackers with contributor-level capabilities or above to upload...