Read the docs

Event Espresso

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Event Espresso records in CISA KEV

No Event Espresso vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Espresso 3 records MEDIUM Event Espresso 4 Decaf 1 record LOW Event Espresso Lite 1 record MEDIUM

Records

3 records in Event Espresso · all components

TI-2017-14751 CVE-2017-1002026 · GHSA-rvvr-r24x-gg3r

SQL injection in Event Expresso Free

Priority MEDIUM 41

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01711 Published 2017-09-14 Fixed in 3.1.37.11.L CWE-89
TI-2020-15988 CVE-2020-26153 · GHSA-v2mg-qj93-cvhw

A cross-site scripting (XSS) vulnerability in…

Priority LOW 34

A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04378 Published 2021-07-13 No fix listed CWE-79
TI-2024-06383 CVE-2024-6883 · GHSA-593p-xc9r-fqp9

Missing authorization in Event Espresso – Event Registration & Ticketing Sales

Priority LOW 20

The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-08-21 No fix listed CWE-862
Open these records in search →