165 matches found
CVE-2026-116394
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9...
CVE-2026-116394 WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9...
EUVD-2026-109969
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9...
CVE-2026-116394
The WpEvently mage-eventpress plugin by Magepeople inc. is vulnerable to Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) . This flaw allows for Code Injection and affects versions from the earliest releases through 5.7.9 . No specific remediation or exploit details a...
CVE-2026-116394 WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9...
WordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
Content Injection vulnerability discovered by Askar in WordPress Plugin WpEvently versions = 5.7.9...
PT-2026-123412
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Magepeople inc. WpEvently mage-eventpress allows Code Injection.This issue affects WpEvently: from n/a through 5.7.9...
CVE-2026-114192
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8...
CVE-2026-114192
The WpEvently WordPress plugin by Magepeople inc. is vulnerable to a Missing Authorization (CWE-862) flaw. This Broken Access Control vulnerability occurs because the software allows exploitation of incorrectly configured access control security levels. The issue specifically affects versions up ...
CVE-2026-114192 WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8...
CVE-2026-114192 WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8...
EUVD-2026-109296
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8...
PT-2026-122606
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8...
WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dcs in WordPress Plugin WpEvently versions = 5.7.8...
WordPress Event Booking Manager for WooCommerce plugin 5.3.6-5.7.2 - Contributor+ Unpublished Event Disclosure vulnerability
Contributor+ Unpublished Event Disclosure vulnerability discovered by Artus KG in WordPress Plugin WpEvently versions 5.3.6-5.7.2...
WordPress Event Booking Manager for WooCommerce plugin < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure vulnerability
Contributor+ Payment Gateway Credential Disclosure vulnerability discovered by Artus KG in WordPress Plugin WpEvently versions 5.6.0...
WordPress Event Booking Manager for WooCommerce plugin 5.3.6-5.3.7 - Unauthenticated Attendee PII Disclosure vulnerability
Unauthenticated Attendee PII Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin WpEvently versions 5.3.6-5.3.7...
CVE-2026-81802
Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...
CVE-2026-81802
WpEvently (WordPress plugin, also listed as Mage EventPress) versions ≤ 5.6.0 contain an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating a network-exploitable issue requiring...