Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin 4.0.25-4.1.15 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure vulnerability

Authenticated (Contributor+) Local File Inclusion vulnerability

PHP Object Injection vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' vulnerability

Unauthenticated Server-Side Request Forgery vulnerability

Unauthenticated Arbitrary File Read vulnerability

PHP Object Injection Vulnerability

Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover vulnerability

Cross Site Scripting (XSS) Vulnerability

Arbitrary File Download Vulnerability

Privilege Escalation Vulnerability

Local File Inclusion Vulnerability

Missing Authorization to Unauthenticated Payment Status Update vulnerability

Authenticated (Contributor+) Local File Inclusion vulnerability

Local File Inclusion vulnerability

Contributor+ Limited Local File Inclusion vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Contributor+) Event Data Import vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Unauthenticated Events Export vulnerability

Authenticated Notice Dismissal Vulnerability