615 matches found
CVE-2025-6970
CVE-2025-6970 Events Manager = 7.0.3 - Unauthenticated SQL Injection via orderby Parameter Description The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3...
CVE-2026-114694
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
CVE-2026-114694 WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
CVE-2026-114694
The Pixelite Events Manager WordPress plugin (versions through 7.4.8 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability due to the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to inject malicious scripts into web pages. No specifi...
EUVD-2026-109256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...
CVE-2026-18366
CVE-2026-18366 — Events Manager 7.4.1: Unauthenticated Privilege Escalation to Administrator | ---|--- Product| Events Manager WordPress plugin Affected versions| 7.1.0 – 7.4.0.x Fixed version| 7.4.1 Weakness| CWE-269: Improper Privilege Management Severity| CVSS 3.1: 9.8 Critical —...
CVE-2026-18366
CVE-2026-18366 Events Manager 7.4.1 - Unauthenticated Privilege Escalation to Administrator 🔗 Stay Updated For the latest zero-days, exploits, and security research 📋 Vulnerability Overview Attribute| Details ---|--- CVE ID| CVE-2026-18366 Severity| 🔴 CRITICAL CVSS 9.8 Plugin| Events Manager for...
CVE-2026-17089-PoC-pwnVader
CVE-2026-17089 — Events Manager = 7.4.0.1 — Unauthenticated reflected XSS headerformat Author: pwnVader · License: MIT repository root | ---|--- Component| Events Manager – Calendar, Bookings, Tickets, and more! WordPress plugin Type| CWE-79 — Reflected Cross-Site Scripting Affected| = 7.4.0.1...
WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Events Manager versions = 7.4.8...
CVE-2026-42689
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7...
CVE-2026-42689 WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7...
EUVD-2026-97734
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7...
CVE-2026-42689
The Pixelite Events Manager WordPress plugin (versions
WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability
Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.8...
CVE-2026-42689: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Conditions.This issue affects Events Manager: from n/a through 7.4.7...
CVE-2026-42633
Subscriber SQL Injection in Events Manager = 7.4.6 versions...
EUVD-2026-96435
Subscriber SQL Injection in Events Manager = 7.4.6 versions...
CVE-2026-42633 WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability
Subscriber SQL Injection in Events Manager = 7.4.6 versions...