CVE-2025-24700

CVE-2025-24700 refers to a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WP Event Aggregator (affected: versions

CVE-2024-38703

CVE-2024-38703 affects WordPress WP Event Aggregator (Plugin) versions n/a through 1.7.9. The issue is Stored XSS due to Improper Neutralization of Input During Web Page Generation. Root cause and impact are stated in the connected records; remediation guidance from the sources is to update to a ...

CVE-2024-31371

CVE-2024-31371 is a Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator, affecting WP Event Aggregator versions from n/a up to 1.7.6. Connected sources (RH Red Hat CVE) confirm the CSRF nature and affected product (WP Event Aggregator) but do not provide concrete d...