Skip to content
Noroxi

Pixelite records

29 published records for vendor pixelite.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
10.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2025-6970
    50Plan

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    HighCVSS 7.5Proof of conceptEPSS 67%

    pixelite · events managerJul 9, 2025

  • CVE-2015-9298
    40Plan

    The events-manager plugin before 5.6 for WordPress has code injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    pixelite · events managerAug 13, 2019

  • CVE-2024-1770
    35Monitor

    Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection

    HighCVSS 8.8No exploitEPSS 1%

    netweblogic · meta tag managerMar 27, 2024

  • CVE-2024-30515
    35Monitor

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pixelite · events managerJun 9, 2024

  • CVE-2024-11260
    30Monitor

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter

    HighCVSS 7.5No exploitEPSS 1%

    pixelite · events managerFeb 21, 2025

  • CVE-2020-35012
    28Monitor

    Events Manager < 5.9.8 - Admin+ SQL Injection

    HighCVSS 7.2No exploitEPSS 2%

    pixelite · events managerDec 1, 2021

  • CVE-2015-9297
    24Monitor

    The events-manager plugin before 5.6 for WordPress has XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 13, 2019

  • CVE-2015-9299
    24Monitor

    The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 13, 2019

  • CVE-2015-9300
    24Monitor

    The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 13, 2019

  • CVE-2012-6716
    24Monitor

    The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 22, 2019

  • CVE-2013-7480
    24Monitor

    The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 22, 2019

  • CVE-2013-7479
    24Monitor

    The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 22, 2019

  • CVE-2013-7478
    24Monitor

    The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 22, 2019

  • CVE-2013-7477
    24Monitor

    The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerAug 22, 2019

  • CVE-2020-35037
    24Monitor

    Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 1%

    pixelite · events managerDec 1, 2021

  • CVE-2023-48326
    24Monitor

    WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    pixelite · events managerNov 30, 2023

  • CVE-2024-5889
    24Monitor

    Events Manager <= 6.4.8 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    pixelite · events managerJun 29, 2024

  • CVE-2025-6975
    24Monitor

    Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    pixelite · events managerJul 9, 2025

  • CVE-2018-0576
    21Monitor

    Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary w

    MediumCVSS 5.4No exploitEPSS 1%

    pixelite · events managerMay 14, 2018

  • CVE-2019-16523
    21Monitor

    The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti

    MediumCVSS 5.4No exploitEPSS 1%

    pixelite · events managerOct 16, 2019

  • CVE-2018-9020
    21Monitor

    The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

    MediumCVSS 5.4No exploitEPSS 1%

    pixelite · events managerMar 25, 2018

  • CVE-2022-3891
    21Monitor

    WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access

    MediumCVSS 5.3No exploitEPSS 1%

    pixelite · wp fullcalendarFeb 13, 2023

  • CVE-2024-2111
    21Monitor

    Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    pixelite · events managerMar 27, 2024

  • CVE-2024-3492
    21Monitor

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_cat

    MediumCVSS 5.4No exploitEPSS 0%

    pixelite · events managerJun 12, 2024

  • CVE-2025-6976
    21Monitor

    Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

    MediumCVSS 5.4No exploitEPSS 0%

    pixelite · events managerJul 9, 2025