jackdewey Community Events vulnerabilities
7 published CVEs name jackdewey Community Events among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-2429
Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field
jackdewey · Community Events
Medium4.9 - CVE-2026-1649
Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter
jackdewey · Community Events
Medium4.4 - CVE-2025-14029
Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter
jackdewey · Community Events
Medium5.3 - CVE-2025-12646
Community Events <= 1.5.4 - Unauthenticated SQL Injection
jackdewey · Community Events
High7.5 - CVE-2025-11995
Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting
jackdewey · Community Events
High7.2 - CVE-2025-10586
Community Events <= 1.5.1 - Unauthenticated SQL Injection
jackdewey · Community Events
Critical9.8 - CVE-2025-10587
Community Events <= 1.5.1 - Unauthenticated SQL Injection
jackdewey · Community Events
Critical9.8