İçeriğe atla
Noroxi

wp-eventmanager kayıtları

wp-eventmanager üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%16,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2021-24252
    29İzleyin

    Event Banner <= 1.3 - Arbitrary File Upload to RCE

    YüksekCVSS 7,2İstismar yokEPSS %2

    wp-eventmanager · event banner6 May 2021

  • CVE-2022-1474
    24İzleyin

    WP Event Manager < 3.1.28 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    wp-eventmanager · wp event manager11 Tem 2022

  • CVE-2024-0976
    24İzleyin

    WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin

    OrtaCVSS 6,1İstismar yokEPSS %1

    wp-eventmanager · wp event manager13 Mar 2024

  • CVE-2023-47697
    24İzleyin

    WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    wp-eventmanager · wp event manager13 Kas 2023

  • CVE-2025-2800
    24İzleyin

    WP Event Manager <= 3.1.50 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'

    OrtaCVSS 6,1İstismar yokEPSS %0

    wp-eventmanager · wp event manager16 Tem 2025

  • CVE-2023-49181
    21İzleyin

    WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    wp-eventmanager · wp event manager15 Ara 2023

  • CVE-2023-52118
    21İzleyin

    WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    wp-eventmanager · wp event manager1 Şub 2024

  • CVE-2024-2691
    21İzleyin

    WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event

    OrtaCVSS 5,4İstismar yokEPSS %0

    wp-eventmanager · wp event manager16 Tem 2024

  • CVE-2021-24810
    19İzleyin

    WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    wp-eventmanager · wp event manager7 Mar 2022

  • CVE-2023-4423
    19İzleyin

    WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    wp-eventmanager · wp event manager27 Eyl 2023

  • CVE-2025-2799
    19İzleyin

    WP Event Manager <= 3.1.49 - Authenticated (Administrator+) Stored Cross-Site Scripting

    OrtaCVSS 4,8İstismar yokEPSS %0

    wp-eventmanager · wp event manager16 Tem 2025

  • CVE-2023-6384
    17İzleyin

    WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR

    OrtaCVSS 4,3İstismar yokEPSS %0

    wp-eventmanager · user profile avatar22 Oca 2024