| CVE-2026-93661 |
The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers…
|
2.7
Faible
|
24 sept. 2026 |
| CVE-2026-93662 |
The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search…
|
4.3
Moyenne
|
24 sept. 2026 |
| CVE-2026-18366 |
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the…
|
9.8
Critique
|
12 août 2026 |
| CVE-2026-18057 |
The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it…
|
8.1
Élevée
|
12 août 2026 |
| CVE-2026-18050 |
The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves…
|
7.5
Élevée
|
6 août 2026 |
| CVE-2026-12987 |
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using…
|
7.5
Élevée
|
22 juil. 2026 |
| CVE-2020-35037 |
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing…
|
Non notée
|
1 déc. 2021 |
| CVE-2020-35012 |
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL…
|
Non notée
|
1 déc. 2021 |