23515 matches found
CVE-2025-68045
CVE-2025-68045 concerns the WordPress WP Event Solution plugin, affected versions
CVE-2025-68045 WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.12 versions...
EUVD-2025-210166
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.12 versions...
GHSA-MF5C-HW34-4HPP
creationtimestamp| type| source ---|---|--- 2026-06-16 01:24:07+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3moenadkbis2e...
PT-2026-49801
In lwis device external event emit of lwis event.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-36985
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
EUVD-2026-36920
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
CVE-2026-42662
Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...
CVE-2026-40776
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
CVE-2026-34898
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
EUVD-2026-36835
Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...
CVE-2026-42662 WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...
CVE-2026-42662
CVE-2026-42662 affects the WordPress Event Tickets plugin (versions
EUVD-2026-36827
Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...
CVE-2026-34898
The CVE-2026-34898 entry concerns the WordPress plugin “Event Tickets Manager for WooCommerce” (versions <= 1.5.3). It describes Unauthenticated Broken Access Control, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, base score 7.5 (HIGH). The vulnerability impacts integrity (...
CVE-2026-34898 WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
GHSA-R47G-FVHR-H676 DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM
INPLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM CWE: CWE-79 XSS — Improper Neutralization of Input During Web Page Generation via CWE-693 Protection Mechanism Failure — silent no-op when forceRemove is called on a parent-less node Summa...
CVE-2026-5230
creationtimestamp| type| source ---|---|--- 2026-06-15 16:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modpsvyaeb2b...
CVE-2025-71329
A flaw was found in image-size. A remote attacker can exploit this vulnerability by providing a specially crafted image buffer that contains a zero-valued size field within a recognized box-type. This malicious input can trigger an infinite loop in the JXL or HEIF image parsers, leading to a...