Show filters
72 Total Results
Displaying 41-50 of 72
Sort by:
Attacker Value
Unknown
CVE-2020-35037
Disclosure Date: December 01, 2021 (last updated February 23, 2025)
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues
0
Attacker Value
Unknown
CVE-2020-35012
Disclosure Date: December 01, 2021 (last updated February 23, 2025)
The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection
0
Attacker Value
Unknown
CVE-2021-20846
Disclosure Date: November 24, 2021 (last updated February 23, 2025)
Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page.
0
Attacker Value
Unknown
CVE-2019-16523
Disclosure Date: October 16, 2019 (last updated October 09, 2024)
The events-manager plugin through 5.9.5 for WordPress (aka Events Manager) is susceptible to Stored XSS due to improper encoding and insertion of data provided to the attribute map_style of shortcodes (locations_map and events_map) provided by the plugin.
0
Attacker Value
Unknown
CVE-2012-6716
Disclosure Date: August 22, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.
0
Attacker Value
Unknown
CVE-2013-7477
Disclosure Date: August 22, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form.
0
Attacker Value
Unknown
CVE-2013-7479
Disclosure Date: August 22, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.3.9 for WordPress has XSS in the search form field.
0
Attacker Value
Unknown
CVE-2013-7480
Disclosure Date: August 22, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.
0
Attacker Value
Unknown
CVE-2013-7478
Disclosure Date: August 22, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post.
0
Attacker Value
Unknown
CVE-2015-9298
Disclosure Date: August 13, 2019 (last updated October 09, 2024)
The events-manager plugin before 5.6 for WordPress has code injection.
0
