İçeriğe atla
Noroxi

Events Manager – Calendar, Bookings, Tickets, and more!

events-manager · eklenti

Events Manager – Calendar, Bookings, Tickets, and more! için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

37 bilinen açık

1 kritik · 2 kayıt için istismar kodu yayımlanmış · son kayıt 5 Eyl 2026

Güvenlik açıkları

  • CVE-2015-9298

    The events-manager plugin before 5.6 for WordPress has code injection.

    Kritik 9.8

  • CVE-2026-57713

    WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability

    Yüksek 8.8

  • CVE-2024-30515

    WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

    Yüksek 8.8

  • CVE-2025-6970

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    Yüksek 7.5

  • CVE-2024-11260

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter

    Yüksek 7.5

  • CVE-2020-35012→ 5.9.8

    Events Manager < 5.9.8 - Admin+ SQL Injection

    Yüksek 7.2

  • CVE-2026-66457

    WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2026-14280

    Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys

    Orta 6.6

  • CVE-2026-15023

    Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action

    Orta 6.5

  • CVE-2025-12976

    Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode

    Orta 6.4

  • CVE-2026-17089

    Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter

    Orta 6.1

  • CVE-2025-6975

    Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter

    Orta 6.1

  • CVE-2023-48326

    WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

    Orta 6.1

  • CVE-2020-35037→ 5.9.8

    Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

    Orta 6.1

  • CVE-2013-7480

    The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

    Orta 6.1

  • CVE-2013-7479

    The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

    Orta 6.1

  • CVE-2013-7478

    The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

    Orta 6.1

  • CVE-2013-7477

    The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

    Orta 6.1

  • CVE-2012-6716

    The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

    Orta 6.1

  • CVE-2015-9300

    The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

    Orta 6.1

  • CVE-2015-9299

    The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

    Orta 6.1

  • CVE-2015-9297

    The events-manager plugin before 5.6 for WordPress has XSS.

    Orta 6.1

  • CVE-2025-14945

    Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes

    Orta 5.4

  • CVE-2025-6976

    Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

    Orta 5.4

  • CVE-2024-3492

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_cat

    Orta 5.4

  • CVE-2024-2111

    Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2019-16523

    The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti

    Orta 5.4

  • CVE-2018-0576

    Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary w

    Orta 5.4

  • CVE-2018-9020

    The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

    Orta 5.4

  • CVE-2026-10627

    Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters

    Orta 5.3

  • CVE-2025-12408

    Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure

    Orta 5.3

  • CVE-2025-1249

    WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

    Orta 5.3

  • CVE-2024-0614

    Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings

    Orta 4.8

  • CVE-2018-13137

    The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=

    Orta 4.8

  • CVE-2025-12407

    Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion

    Orta 4.3

  • CVE-2024-30421

    WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability

    Orta 4.3

  • CVE-2024-2110

    Events Manager <= 6.4.7.1 - Cross-Site Request Forgery

    Orta 4.3

← Dizine dön