Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting

Event Espresso Core-Reg 4.10.7.p is vulnerable to cross-site scripting in wp-content/plugins/event-espresso-core-reg/adminpages/messages/templates/eemsgadminoverview.template.php and allows remote attackers to inject arbitrary web script or HTML via the page parameter. id: CVE-2020-26153 info:...

CVE-2025-68007

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...

CVE-2025-68007

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...

CVE-2025-68007 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...

CVE-2025-68007 WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...

CVE-2025-68007

CVE-2025-68007 corresponds to a Missing Authorization/Settings Change vulnerability in WordPress Event Espresso 4 Decaf (affected

CVE-2025-68007

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Espresso 4 Decaf: from n/a through = 5.0.37.decaf...

WordPress plugin Event Espresso 4 Decaf has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4051

Name of the Vulnerable Software and Affected Versions Event Espresso versions through 5.0.37.decaf Description An authorization issue exists in Event Espresso 4 Decaf, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Event Espresso 4 Decaf to ...

WordPress Event Espresso 4 Decaf plugin <= 5.0.37.decaf - Settings Change vulnerability

Settings Change vulnerability discovered by Legion Hunter in WordPress Plugin Event Espresso 4 Decaf versions = 5.0.37.decaf...

MAL-2025-171605 Malicious code in nabeelaziz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f32980faa84861d4803169b0fa6e6ab14f269e6887b7a3401c07c63b82b76f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2017-6255

Malware in sbrugna...

EUVD-2023-31213

Malicious code in bioql PyPI...

EUVD-2025-11652

Malicious code in bioql PyPI...

EUVD-2021-34231

Malicious code in bioql PyPI...

EUVD-2024-53049

Malicious code in bioql PyPI...

EUVD-2024-47873

Malicious code in bioql PyPI...

Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4682 Malicious code in espresso-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ce5ab7d96b084c2116afda967b080d56ed7a0dad48fe8ac7b67a1317824e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...