Events Manager
Marcus (aka @msykes)
Developer
7.4.0.1
Latest version
70,000
Installations
No date
Last updated
Vulnerability history
0 present
26 patched
8 Mitigation rules
- PHP Object Injection vulnerability<= 7.3.64 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode vulnerability<= 7.2.2.117/12/2025
- Cross-Site Request Forgery to Location Deletion vulnerability<= 7.2.2.212/12/2025
- Unauthenticated Information Exposure vulnerability<= 7.2.2.212/12/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 6.6.4.409/07/2025
- Unauthenticated SQL Injection vulnerability<= 6.6.4.409/07/2025
- Cross Site Scripting (XSS) vulnerability<= 6.6.4.409/07/2025
- Broken Access Control vulnerability<= 6.6.4.126/02/2025
- Unauthenticated SQL Injection via Event Status Parameter vulnerability<= 6.6.320/02/2025
- Reflected Cross-Site Scripting vulnerability<= 6.4.801/07/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes vulnerability<= 6.4.7.312/06/2024
- Broken Access Control vulnerability<= 6.4.6.428/03/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 6.4.7.128/03/2024
- Cross-Site Request Forgery vulnerability<= 6.4.7.128/03/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.4.7.128/03/2024
- Authenticated(Administator+) Stored Cross-Site Scripting via settings vulnerability<= 6.4.6.429/02/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 6.4.523/11/2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 5.9.7.330/11/2020
- SQL Injection (SQLi) vulnerability<= 5.9.7.330/11/2020
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 5.9.8.125/11/2020
- CSV Injection vulnerability<= 5.9.7.107/02/2020
- Unauthenticated Stored XSS vulnerability<= 5.8.1.128/03/2018
- Cross Site Scripting<= 5.5.115/05/2015
- Cross Site Scripting<= 5.3.815/05/2015
- Multiple Cross Site Scripting<= 5.3.515/05/2015
- Multiple XSS<= 5.3.419/01/2013