WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

Information

Software Type Plugin
Software Slug wp-event-manager (view on wordpress.org)
Software Status Active
Software Author wpeventmanager
Software Website www.wp-eventmanager.com
Software Downloads 650,726
Software Active Installs 20,000
Software Record Last Updated May 9, 2024

6 Vulnerabilities

WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
6.1
CVE-2024-0976
Feb 23, 2024
Researcher: Maksim Kosenko
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
5.5
CVE-2023-49181
Nov 29, 2023
Researcher: emad
WP Event Manager <= 3.1.42 - Cross-Site Scripting
7.2
CVE-2023-47697
Nov 9, 2023
Researcher: LEE SE HYOUNG
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-4423
Sep 20, 2023
Researcher: JackYu
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
6.1
CVE-2022-1474
Jun 20, 2022
Researcher: Utkarsh Agrawal
WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
4.8
CVE-2021-24810
Feb 14, 2022
Researcher: Huy Nguyen
Title CVE ID CVSS Researchers Date
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin CVE-2024-0976 6.1 Maksim Kosenko February 23, 2024
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2023-49181 5.5 emad November 29, 2023
WP Event Manager <= 3.1.42 - Cross-Site Scripting CVE-2023-47697 7.2 LEE SE HYOUNG November 9, 2023
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-4423 4.4 JackYu September 20, 2023
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting CVE-2022-1474 6.1 Utkarsh Agrawal June 20, 2022
WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting CVE-2021-24810 4.8 Huy Nguyen February 14, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation