Event Espresso

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Event Espresso records in CISA KEV

No Event Espresso vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Event Espresso 4 Decaf · all components

TI-2021-03261 CVE-2021-4404 · GHSA-6268-vp8g-p7c5

LOW 20

The Event Espresso 4 Decaf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.11.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0039 Published 2023-07-01 No fix listed CWE-352