| CVE-2025-9808 |
The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including,…
|
5.3
Moyenne
|
16 sept. 2025 |
| CVE-2025-9807 |
The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all…
|
7.5
Élevée
|
12 sept. 2025 |
| CVE-2025-5144 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’…
|
6.4
Moyenne
|
11 juin 2025 |
| CVE-2024-12118 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link…
|
6.4
Moyenne
|
23 janv. 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Moyenne
|
16 oct. 2024 |
| CVE-2024-6931 |
The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RSVP name field in all…
|
7.2
Élevée
|
27 sept. 2024 |
| CVE-2024-8275 |
The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the…
|
9.8
Critique
|
25 sept. 2024 |
| CVE-2023-6557 |
The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,…
|
5.3
Moyenne
|
5 févr. 2024 |