Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2024-6271
Disclosure Date: July 22, 2024 (last updated July 26, 2024)
The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack
0
Attacker Value
Unknown
CVE-2022-44742
Disclosure Date: March 23, 2023 (last updated November 08, 2023)
Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.
0
Attacker Value
Unknown
CVE-2021-24496
Disclosure Date: August 02, 2021 (last updated February 23, 2025)
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
0
Attacker Value
Unknown
CVE-2015-3313
Disclosure Date: September 07, 2017 (last updated November 26, 2024)
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
0
