Vendors / joe007 Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now joe007 records in CISA KEV No joe007 vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0048 · Published 2026-07-08 · No fix listed CWE-289
Priority LOW 39
The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of suff…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00463 · Published 2026-07-08 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical1 High1 Medium0 Low0 No CVSS0