CVE-2026-1941 WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpevents' shortcode in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

EUVD-2025-3892

Malicious code in bioql PyPI...

EUVD-2024-29267

Malicious code in bioql PyPI...

EUVD-2024-37554

Malicious code in bioql PyPI...

CVE-2024-31371

Cross-Site Request Forgery CSRF vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6...

CVE-2024-38703

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9...

CVE-2025-24700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through = 1.8.2...

CVE-2025-24700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through = 1.8.2...

CVE-2025-24700 WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Reflected XSS. This issue affects WP Event Aggregator: from n/a through 1.8.2...

CVE-2025-24700

CVE-2025-24700 refers to a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WP Event Aggregator (affected: versions

PT-2025-7035

Name of the Vulnerable Software and Affected Versions: WP Event Aggregator versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

CVE-2024-38703

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9...

CVE-2024-38703

CVE-2024-38703 affects WordPress WP Event Aggregator (Plugin) versions n/a through 1.7.9. The issue is Stored XSS due to Improper Neutralization of Input During Web Page Generation. Root cause and impact are stated in the connected records; remediation guidance from the sources is to update to a ...

CVE-2024-31371

Cross-Site Request Forgery CSRF vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6...

CVE-2024-31371

CVE-2024-31371 is a Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator, affecting WP Event Aggregator versions from n/a up to 1.7.6. Connected sources (RH Red Hat CVE) confirm the CSRF nature and affected product (WP Event Aggregator) but do not provide concrete d...

CVE-2024-31371 WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6...