Event Espresso

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Event Espresso records in CISA KEV

No Event Espresso vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Event Espresso 3 records MEDIUM Event Espresso 4 Decaf 1 record LOW Event Espresso Lite 1 record MEDIUM

Records

1 record in Event Espresso Lite · all components

TI-2017-10821 CVE-2017-14760 · GHSA-p2vh-c677-7fm4

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free…

MEDIUM 45

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2017-09-27 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	5
Low	1
No CVSS	0