Not rated
CVE-2020-35037 The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing…
Description
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Events Manager 5.9 | earliest → < 5.9.8 | 5.9.8 |
Other CVEs of Events Manager
The 8 CVEs of Events Manager →
CVE-2026-93662
The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search…
4.3
Medium
CVE-2026-93661
The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers…
2.7
Low
CVE-2026-18366
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the…
9.8
Critical
CVE-2026-18057
The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it…
8.1
High