CVE-2025-32507

CVE-2025-32507 is a reflected Cross‑Site Scripting (XSS) vulnerability in the WordPress plugin “Event Espresso – Custom Email Template Shortcode.” It arises from improper input neutralization during web page generation and affects versions up to 1.0.0. The CVSS 3.1 vector indicates attack require...

WordPress Event Espresso 4 Decaf Plugin < 5.0.22.decaf is vulnerable to Broken Access Control

Software Event Espresso 4 Decaf Type Plugin Vulnerable versions 5.0.22.decaf Fixed in 5.0.22.decaf OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-6883 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a6f359f7f67f Credits Lucio Sá...