Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
PixeliteEvents Manager

14 matches found

cve
cve•added 2024/03/28 2:15 a.m.•54 views

CVE-2024-2111

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the physical location value in all versions up to, and including, 6.4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenti...

6.4CVSS7.5AI score0.00094EPSS
cve
cve•added 2019/08/13 5:15 p.m.•52 views

CVE-2015-9297

The events-manager plugin before 5.6 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS
cve
cve•added 2024/06/29 5:15 a.m.•44 views

CVE-2024-5889

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic...

6.1CVSS6.2AI score0.00609EPSS
cve
cve•added 2019/08/13 5:15 p.m.•42 views

CVE-2015-9299

The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

6.1CVSS6.4AI score0.0019EPSS
cve
cve•added 2019/08/22 1:15 p.m.•39 views

CVE-2013-7477

The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

6.1CVSS6AI score0.0019EPSS
cve
cve•added 2024/06/12 11:15 a.m.•39 views

CVE-2024-3492

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'event', 'location', and 'event_category' shortcodes in all versions up to, and including, 6.4.7.3 due to insufficient input sanitization and output escapin...

6.4CVSS5.9AI score0.00162EPSS
cve
cve•added 2019/08/22 1:15 p.m.•38 views

CVE-2012-6716

The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

6.1CVSS6AI score0.0019EPSS
cve
cve•added 2019/08/13 5:15 p.m.•37 views

CVE-2015-9300

The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

6.1CVSS6.1AI score0.0019EPSS
cve
cve•added 2019/08/22 1:15 p.m.•34 views

CVE-2013-7479

The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

6.1CVSS6AI score0.0019EPSS
cve
cve•added 2019/08/22 1:15 p.m.•33 views

CVE-2013-7478

The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

6.1CVSS6AI score0.0019EPSS
cve
cve•added 2019/08/22 1:15 p.m.•33 views

CVE-2013-7480

The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

6.1CVSS6AI score0.0019EPSS
cve
cve•added 2021/12/01 11:15 p.m.•28 views

CVE-2020-35037

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues

6.1CVSS6AI score0.0021EPSS
cve
cve•added 2025/07/09 11:15 p.m.•16 views

CVE-2025-6975

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendar_header’ parameter in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping. This makes it possible for una...

6.1CVSS6.1AI score0.00089EPSS
cve
cve•added 2025/07/09 11:15 p.m.•13 views

CVE-2025-6976

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.5AI score0.00045EPSS