Read the docs

Avecnous

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Avecnous records in CISA KEV

No Avecnous vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Post 4 records LOW

Records

4 records in Event Post · all components

TI-2025-28980 CVE-2025-46228 · GHSA-89w7-ghxh-3v5x

WordPress Event post plugin <= 5.9.11 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through <= 5.9.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0022 Published 2025-04-22 No fix listed CWE-79
TI-2024-09446 CVE-2024-10186 · GHSA-hqxp-2xfg-g9qc

Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode

Priority LOW 28

The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode in all versions up to, and including, 5.9.6 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-11-06 No fix listed CWE-79
TI-2024-01283 CVE-2024-1376

Event post <= 5.9.4 - Missing Authorization

Priority LOW 20

The Event post plugin for WordPress is vulnerable to unauthorized bulk metadata update due to a missing capability check on the save_bulkdatas function in all versions up to, and including, 5.9.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-05-24 No fix listed CWE-284
Open these records in search →