WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Quick Event Manager Type Plugin Vulnerable versions = 9.7.4 Fixed in 9.7.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23974 Patch priority Low CVSS severity Low 5.4 Developer Fullworks Plugins PSID 5e2ae440ff0d Credits yuyudhn...

Quick Event Manager < 9.7.5 - Registration Deletion/Update via CSRF

The plugin does not have CSRF checks when deleting and updating registrations, which could allow attackers to make logged in users perform such actions via CSRF attacks...

WordPress Quick Event Manager Plugin < 9.7.5 is vulnerable to Cross Site Scripting (XSS)

Software Quick Event Manager Type Plugin Vulnerable versions 9.7.5 Fixed in 9.7.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23491 Patch priority High CVSS severity High 7.1 Developer Fullworks Plugins PSID 38346c7453ae Credits Joshua Martinelle...

CVE-2023-23491

CVE-2023-23491 : The Quick Event Manager WordPress Plugin (versions before 9.7.5) is affected by a reflected cross-site scripting (XSS) vulnerability in the category parameter of the qem_ajax_calendar action. Unauthenticated attackers can inject JavaScript via this parameter, potentially compromi...

PT-2023-6550 · WordPress · Quick Event Manager Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Quick Event Manager WordPress Plugin version prior to 9.7.5 Description: The issue is related to a reflected cross-site scripting vulnerability. It affects the category parameter of the qem ajax calendar action. This vulnerability can be...

WordPress Quick Event Manager plugin < 9.2.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Quick Event Manager plugin versions 9.2.17. Solution Update the WordPress Quick Event Manager plugin to the latest available version at least 9.2.17...

WordPress Quick Event Manager plugin < 9.2.17 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quick Event Manager plugin versions 9.2.17. Solution Update the WordPress Quick Event Manager plugin to the latest available version at least 9.2.17...