CVE-2020-26153

Summary: CVE-2020-26153 remains a documented XSS vulnerability affecting the Event Espresso Core-Reg plugin (WordPress) prior to 4.10.7.p. The weakness is in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php, where the page parameter is n...

CVE-2017-1002026

The CVE-2017-1002026 entry concerns the WordPress plugin Event Espresso Free (v3.1.37.11.L). The root cause is failure to sanitize the user-supplied input in the edit_event_category function via the $id parameter before it is used in an SQL statement, enabling a SQL injection. Documented impact i...

CVE-2024-6883

Summary of CVE-2024-6883 : The Event Espresso 4 Decaf – Event Registration & Ticketing plugin for WordPress contains a vulnerability due to a missing capability check on saveTimezoneString (and related functions) that enables authenticated attackers with Subscriber-level access and above to modif...