CVE-2024-6271

CVE-2024-6271 affects Community Events WordPress plugin prior to 1.5. The vulnerability is due to a missing CSRF check when deleting events, allowing a CSRF attack to cause a logged-in admin to delete arbitrary events. No exploitation details are provided in the documents. Remediation: upgrade to...

CVE-2022-44742

The CVE-2022-44742 entry concerns the WordPress Community Events plugin, affected versions are = 1.4.9) when available, and monitor for updated advisories from the plugin maintainers.

CVE-2021-24496

Affected software: WordPress Community Events plugin (before 1.4.8). Root cause: the plugin does not sanitize, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page. Impact (as described): reflected Cross‑Site Scripting executed ...

CVE-2015-3313

CVE-2015-3313 details a SQL injection in the WordPress plugin Community Events (versions prior to 1.4). The vulnerability stems from inadequate input validation in the plugin’s SQL construction, with the CNVD entry noting exploitation possible via the GET parameter (notably the vulnerable eventye...

CVE-2024-6270

The Community Events WordPress plugin, in versions prior to 1.5.1 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape certain settings before they are displayed on a page. This allows high-privilege users, such as administrato...