Events Manager – Calendar, Bookings, Tickets, Appointments and more!

Güvenlik açıkları

• CVE-2015-9298kimlik doğrulamasız

  The events-manager plugin before 5.6 for WordPress has code injection.

  Kritik 9.8

• CVE-2026-57713kimlik doğrulamasız · tıklama gerekir≤ 7.3.6

  WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2024-30515giriş gerekir≤ 6.4.6.4

  WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2025-6970kimlik doğrulamasız≤ 7.0.3

  Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

  Yüksek 7.5

• CVE-2024-11260kimlik doğrulamasız≤ 6.6.3

  Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter

  Yüksek 7.5

• CVE-2020-35012yönetici→ 5.9.8

  Events Manager < 5.9.8 - Admin+ SQL Injection

  Yüksek 7.2

• CVE-2026-66457kimlik doğrulamasız · tıklama gerekir≤ 7.4.2

  WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-14280yönetici≤ 7.3.7.4

  Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys

  Orta 6.6

• CVE-2026-15023katılımcı+≤ 7.4.0

  Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action

  Orta 6.5

• CVE-2025-12976katılımcı+≤ 7.2.2.1

  Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode

  Orta 6.4

• CVE-2026-17089kimlik doğrulamasız · tıklama gerekir≤ 7.4.0.1

  Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter

  Orta 6.1

• CVE-2025-6975kimlik doğrulamasız · tıklama gerekir≤ 7.0.3

  Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter

  Orta 6.1

• CVE-2023-48326kimlik doğrulamasız · tıklama gerekir≤ 6.4.5

  WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2020-35037kimlik doğrulamasız · tıklama gerekir→ 5.9.8

  Events Manager < 5.9.8 - Cross-Site Scripting (XSS)

  Orta 6.1

• CVE-2013-7480kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

  Orta 6.1

• CVE-2013-7479kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.

  Orta 6.1

• CVE-2013-7478kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.

  Orta 6.1

• CVE-2013-7477kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.

  Orta 6.1

• CVE-2012-6716kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.

  Orta 6.1

• CVE-2015-9300kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.

  Orta 6.1

• CVE-2015-9299kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.

  Orta 6.1

• CVE-2015-9297kimlik doğrulamasız · tıklama gerekir

  The events-manager plugin before 5.6 for WordPress has XSS.

  Orta 6.1

• CVE-2025-14945kimlik doğrulamasız≤ 7.3.3

  Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes

  Orta 5.4

• CVE-2019-16523giriş gerekir

  The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and inserti

  Orta 5.4

• CVE-2018-0576giriş gerekir

  Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary w

  Orta 5.4

• CVE-2018-9020giriş gerekir

  The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

  Orta 5.4

• CVE-2025-6976katılımcı+≤ 7.0.3

  Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes

  Orta 5.4

• CVE-2024-3492katılımcı+≤ 6.4.7.3

  Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_cat

  Orta 5.4

• CVE-2024-2111katılımcı+≤ 6.4.7.1

  Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2026-10627kimlik doğrulamasız≤ 7.4.0

  Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters

  Orta 5.3

• CVE-2025-12408kimlik doğrulamasız≤ 7.2.2.2

  Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure

  Orta 5.3

• CVE-2025-1249kimlik doğrulamasız≤ 6.6.4.1

  WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-0614yönetici≤ 6.4.6.4

  Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings

  Orta 4.8

• CVE-2018-13137yüksek yetki

  The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=

  Orta 4.8

• CVE-2025-12407kimlik doğrulamasız · tıklama gerekir≤ 7.2.2.2

  Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion

  Orta 4.3

• CVE-2024-30421kimlik doğrulamasız · tıklama gerekir≤ 6.4.7.1

  WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2024-2110kimlik doğrulamasız · tıklama gerekir≤ 6.4.7.1

  Events Manager <= 6.4.7.1 - Cross-Site Request Forgery

  Orta 4.3