CVE-2020-26153

Summary: CVE-2020-26153 remains a documented XSS vulnerability affecting the Event Espresso Core-Reg plugin (WordPress) prior to 4.10.7.p. The weakness is in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php, where the page parameter is n...

CVE-2024-6883

Summary of CVE-2024-6883 : The Event Espresso 4 Decaf – Event Registration & Ticketing plugin for WordPress contains a vulnerability due to a missing capability check on saveTimezoneString (and related functions) that enables authenticated attackers with Subscriber-level access and above to modif...