AwesomeTOGI

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

AwesomeTOGI records in CISA KEV

No AwesomeTOGI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Product-category-tree 1 record LOW Product Category Tree 1 record LOW

Records

7 records

TI-2023-24792 CVE-2023-46151 · GHSA-8cjj-hx74-g3q6

WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00338 Published 2023-10-24 No fix listed CWE-352

TI-2025-16550 CVE-2025-22668 · GHSA-qc34-7p9f-9q4v

WordPress Awesome Event Booking plugin <= 2.7.2 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Awesome Event Booking: from n/a th…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00369 Published 2025-03-27 No fix listed CWE-862

TI-2025-22597 CVE-2025-31416 · GHSA-43vx-c2h5-w85c

WordPress Awesome Event Booking plugin <= 2.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Reflected XSS.This issue affects Awesome Event Booking:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00257 Published 2025-04-04 No fix listed CWE-79

TI-2025-18277 CVE-2025-24560 · GHSA-9m45-3rc4-v6vf

WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-31 No fix listed CWE-79

TI-2023-24102 CVE-2023-45054 · GHSA-4gxq-5q4x-qpf7

WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-18 No fix listed CWE-79

TI-2023-13604 CVE-2023-29173 · GHSA-gqj9-g6j7-jf68

WordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Category Tree: from n/a through 2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00442 Published 2024-12-09 No fix listed CWE-862

TI-2025-16551 CVE-2025-22669 · GHSA-hqhm-v784-c624

WordPress Awesome Event Booking plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in AwesomeTOGI Awesome Event Booking awesome-event-booking allows Cross Site Request Forgery.This issue affects Awesome Event Booking: from n/a through <= 2.7.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00161 Published 2025-03-27 No fix listed CWE-352

Open these records in search →

Critical	0
High	4
Medium	3
Low	0
No CVSS	0