CVE-2024-6271

CVE-2024-6271 affects Community Events WordPress plugin prior to 1.5. The vulnerability is due to a missing CSRF check when deleting events, allowing a CSRF attack to cause a logged-in admin to delete arbitrary events. No exploitation details are provided in the documents. Remediation: upgrade to...

CVE-2022-44742

The CVE-2022-44742 entry concerns the WordPress Community Events plugin, affected versions are = 1.4.9) when available, and monitor for updated advisories from the plugin maintainers.

CVE-2015-3313

CVE-2015-3313 details a SQL injection in the WordPress plugin Community Events (versions prior to 1.4). The vulnerability stems from inadequate input validation in the plugin’s SQL construction, with the CNVD entry noting exploitation possible via the GET parameter (notably the vulnerable eventye...

CVE-2021-24496

Affected software: WordPress Community Events plugin (before 1.4.8). Root cause: the plugin does not sanitize, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page. Impact (as described): reflected Cross‑Site Scripting executed ...

CVE-2024-6270

CVE-2024-6270 affects the WordPress plugin Community Events prior to 1.5.1. The issue is a Stored XSS vulnerability caused by insufficient sanitization and escaping of certain plugin settings. This can allow high-privilege users (e.g., administrators) to inject XSS even when unfiltered_html is di...