İçeriğe atla
Noroxi

Pixelite kayıtları

pixelite üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%10,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2025-6970
    50Planlayın

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %67

    pixelite · events manager9 Tem 2025

  • CVE-2015-9298
    40Planlayın

    The events-manager plugin before 5.6 for WordPress has code injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    pixelite · events manager13 Ağu 2019

  • CVE-2024-1770
    35İzleyin

    Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    netweblogic · meta tag manager27 Mar 2024

  • CVE-2024-30515
    35İzleyin

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    pixelite · events manager9 Haz 2024

  • CVE-2024-11260
    30İzleyin

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter

    YüksekCVSS 7,5İstismar yokEPSS %1

    pixelite · events manager21 Şub 2025

  • CVE-2020-35012
    28İzleyin

    Events Manager < 5.9.8 - Admin+ SQL Injection

    YüksekCVSS 7,2İstismar yokEPSS %2

    pixelite · events manager1 Ara 2021

  • CVE-2015-9297
    24İzleyin

    The events-manager plugin before 5.6 for WordPress has XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager13 Ağu 2019

  • CVE-2015-9299
    24İzleyin

    The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager13 Ağu 2019

  • CVE-2015-9300
    24İzleyin

    The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager13 Ağu 2019

  • CVE-2012-6716
    24İzleyin

    The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager22 Ağu 2019

  • CVE-2013-7480
    24İzleyin

    The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager22 Ağu 2019

  • CVE-2013-7479
    24İzleyin

    The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager22 Ağu 2019

  • CVE-2013-7478
    24İzleyin

    The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager22 Ağu 2019

  • CVE-2013-7477
    24İzleyin

    The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager22 Ağu 2019

  • CVE-2020-35037
    24İzleyin

    Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelite · events manager1 Ara 2021

  • CVE-2023-48326
    24İzleyin

    WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    pixelite · events manager30 Kas 2023

  • CVE-2024-5889
    24İzleyin

    Events Manager <= 6.4.8 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    pixelite · events manager29 Haz 2024

  • CVE-2025-6975
    24İzleyin

    Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    pixelite · events manager9 Tem 2025

  • CVE-2018-0576
    21İzleyin

    Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary w

    OrtaCVSS 5,4İstismar yokEPSS %1

    pixelite · events manager14 May 2018

  • CVE-2019-16523
    21İzleyin

    The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti

    OrtaCVSS 5,4İstismar yokEPSS %1

    pixelite · events manager16 Eki 2019

  • CVE-2018-9020
    21İzleyin

    The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

    OrtaCVSS 5,4İstismar yokEPSS %1

    pixelite · events manager25 Mar 2018

  • CVE-2022-3891
    21İzleyin

    WP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access

    OrtaCVSS 5,3İstismar yokEPSS %1

    pixelite · wp fullcalendar13 Şub 2023

  • CVE-2024-2111
    21İzleyin

    Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    pixelite · events manager27 Mar 2024

  • CVE-2024-3492
    21İzleyin

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_cat

    OrtaCVSS 5,4İstismar yokEPSS %0

    pixelite · events manager12 Haz 2024

  • CVE-2025-6976
    21İzleyin

    Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

    OrtaCVSS 5,4İstismar yokEPSS %0

    pixelite · events manager9 Tem 2025