WP Event Manager

Authenticated (Administrator+) Stored CrossSite Scripting vulnerability <= 3.1.49

Unauthenticated Stored CrossSite Scripting via 'organizer_name' vulnerability <= 3.1.50

Local File Inclusion Vulnerability <= 3.1.51

Broken Access Control vulnerability <= 3.1.51

Authenticated (Contributor+) Stored CrossSite Scripting via 'events' Shortcode vulnerability <= 3.1.43