| CVE-2026-93661 |
The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers…
|
2.7
Low
|
Sep 24, 2026 |
| CVE-2026-93662 |
The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search…
|
4.3
Medium
|
Sep 24, 2026 |
| CVE-2026-18366 |
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the…
|
9.8
Critical
|
Aug 12, 2026 |
| CVE-2026-18057 |
The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it…
|
8.1
High
|
Aug 12, 2026 |
| CVE-2026-18050 |
The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves…
|
7.5
High
|
Aug 6, 2026 |
| CVE-2026-12987 |
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using…
|
7.5
High
|
Jul 22, 2026 |
| CVE-2020-35037 |
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing…
|
Not rated
|
Dec 1, 2021 |
| CVE-2020-35012 |
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL…
|
Not rated
|
Dec 1, 2021 |