30 matches found
CVE-2025-1762
CVE-2025-1762 concerns the WordPress plugin Event Tickets with Ticket Scanner prior to version 2.5.4. The root cause is missing CSRF protection when updating settings, enabling a logged-in attacker to cause settings changes via CSRF. Public sources (NVD, Red Hat, CVE lists) confirm the vulnerabil...
CVE-2025-22368
creationtimestamp| type| source ---|---|--- 2025-03-11 14:43:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144328855531757...
GHSA-37WC-H8XC-5HC4
creationtimestamp| type| source ---|---|--- 2025-02-10 17:41:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113980818586300320...
CVE-2024-9697
creationtimestamp| type| source ---|---|--- 2025-01-07 05:39:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/345 2025-01-07 06:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4ys3nmif25 2025-01-07 06:33:53+00:00| seen|...
CVE-2024-0855
Summary: CVE-2024-0855 affects the Spiffy Calendar WordPress plugin (versions prior to 4.9.9). The root cause is that the plugin does not validate the event_author field when creating events, allowing any user to modify it and impersonate another author. Impact: creates deception about who create...
CVE-2024-24796 WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection
Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin: from n/a through 4.1.1...
Cross site scripting
In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...
Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability
Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and...
CVE-2019-9820
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...
