Vulnerability history

Cross Site Scripting (XSS) vulnerability

Reflected XSS vulnerability

Unauthenticated Email Address Disclosure vulnerability

Unauthenticated Virtual Event Settings Update vulnerability

Unauthenticated Virtual Event Password Disclosure vulnerability

Unauthenticated Arbitrary Post Metadata Update vulnerability

Sensitive Data Exposure vulnerability

Broken Access Control Vulnerability

Local File Inclusion Vulnerability

Local File Inclusion vulnerability

Local File Inclusion vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored Cross-Site Scripting via event subtitle vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates vulnerability

Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery via evo_eventpost_update_meta vulnerability

Cross-Site Request Forgery via save_virtual_event_settings vulnerability

Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta

Reflected Cross-Site Scripting vulnerability

Admin+ Stored XSS vulnerability

Unauthenticated Event Access vulnerability

Unauthenticated Post Access via IDOR vulnerability