WpEvently
magepeopleteam
Developer
5.7.9
Latest version
7,000
Installations
No date
Last updated
Vulnerability history
0 present
35 patched
11 Mitigation rules
- Contributor+ Unpublished Event Disclosure vulnerability5.3.6-5.7.223/09/2026
- Contributor+ Payment Gateway Credential Disclosure vulnerability< 5.6.017/09/2026
- Unauthenticated Attendee PII Disclosure vulnerability5.3.6-5.3.717/09/2026
- Insecure Direct Object References (IDOR) vulnerability<= 5.6.007/09/2026
- Broken Access Control vulnerability<= 5.5.027/08/2026
- Broken Access Control vulnerability<= 5.5.027/08/2026
- Contributor+ PHP Object Injection vulnerability< 5.3.702/08/2026
- Author+ Stored XSS vulnerability< 5.3.702/08/2026
- Contributor+ Arbitrary Post Modification vulnerability< 5.3.702/08/2026
- Missing Authorization to Authenticated (Contributor+) Site-Wide Payment Settings Modification vulnerability<= 5.3.728/07/2026
- Other Vulnerability Type vulnerability<= 5.3.326/05/2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 5.1.420/03/2026
- PHP Object Injection vulnerability<= 5.1.118/02/2026
- Sensitive Data Exposure vulnerability< 5.1.914/02/2026
- Deserialization of untrusted data vulnerability<= 5.0.825/12/2025
- Cross Site Request Forgery (CSRF) vulnerability<= 5.1.106/12/2025
- Broken Access Control vulnerability<= 5.0.404/12/2025
- Broken Access Control vulnerability<= 5.0.430/11/2025
- PHP Object Injection Vulnerability<= 4.4.827/08/2025
- Broken Access Control vulnerability<= 4.4.630/07/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.4.209/06/2025
- PHP Object Injection vulnerability<= 4.3.608/04/2025
- PHP Object Injection vulnerability<= 4.2.927/03/2025
- Broken Access Control vulnerability<= 4.2.927/03/2025
- Cross Site Scripting (XSS) vulnerability<= 4.2.521/10/2024
- Local File Inclusion vulnerability<= 4.2.107/08/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 4.1.211/04/2024
- PHP Object Injection vulnerability<= 4.1.131/01/2024
- Cross Site Scripting (XSS) vulnerability<= 3.9.522/06/2023
- Cross Site Scripting (XSS) vulnerability<= 3.8.620/03/2023
- Cross Site Request Forgery (CSRF)<= 3.7.716/03/2023
- Contributor+ Stored XSS vulnerability< 3.8.010/01/2023
- SQL Injection (SQLi) vulnerability<= 3.5.721/02/2022
- Unauthenticated Arbitrary Elementor Template Import vulnerability<= 3.5.103/11/2021
- Unauthenticated Arbitrary Options Reset vulnerability<= 3.5.103/11/2021