wpeventmanager vulnerabilities
6 published CVEs name wpeventmanager among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-2799
WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Medium4.4 - CVE-2025-2800
WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'
wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
High7.2 - CVE-2024-10789
WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update
wpeventmanager · WP User Profile Avatar
Medium4.3 - CVE-2024-2691
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events' Shortcode
wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Medium6.4 - CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Medium6.1 - CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
wpeventmanager · WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Medium4.4