Skip to content
Noroxi

LiquidWeb records

11 published records for vendor liquidweb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
45.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

11 records
  • CVE-2019-16120
    36Monitor

    CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Expo

    HighCVSS 8.8No exploitEPSS 3%

    liquidweb · event ticketsSep 8, 2019

  • CVE-2023-47668
    30Monitor

    WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 1%

    liquidweb · restrict contentNov 22, 2023

  • CVE-2025-14844
    30Monitor

    Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure

    HighCVSS 7.5No exploitEPSS 0%

    liquidweb · restrict contentJan 16, 2026

  • CVE-2024-11090
    30Monitor

    Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

    HighCVSS 7.5No exploitEPSS 0%

    liquidweb · restrict contentJan 26, 2025

  • CVE-2024-1316
    26Monitor

    Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access

    MediumCVSS 6.5No exploitEPSS 1%

    liquidweb · event ticketsMar 4, 2024

  • CVE-2022-45825
    24Monitor

    WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 1%

    liquidweb · wpcompleteMar 28, 2023

  • CVE-2023-3182
    24Monitor

    Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS

    MediumCVSS 6.1No exploitEPSS 0%

    liquidweb · restrict contentJul 17, 2023

  • CVE-2024-31432
    21Monitor

    WordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    stellarwp · restrict contentApr 15, 2024

  • CVE-2024-13457
    21Monitor

    Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure

    MediumCVSS 5.3No exploitEPSS 0%

    liquidweb · event ticketsJan 30, 2025

  • CVE-2024-1319
    17Monitor

    Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure

    MediumCVSS 4.3No exploitEPSS 0%

    liquidweb · event ticketsMar 4, 2024

  • CVE-2024-1053
    17Monitor

    Event Tickets and Registration <= 5.8.1 - Missing Authorization

    MediumCVSS 4.3No exploitEPSS 0%

    liquidweb · event ticketsFeb 22, 2024