Liquid Web / StellarWP

Records38All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Liquid Web / StellarWP records in CISA KEV

No Liquid Web / StellarWP vulnerabilities are listed in CISA KEV.

Records

38 records

TI-2026-56689 CVE-2026-82222 · GHSA-f9qw-6682-4v7w

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

MEDIUM 53

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0225 Published 2026-08-28 No fix listed CWE-502

TI-2026-36681 CVE-2026-49772 · GHSA-v796-wqfq-j4xh

WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01937 Published 2026-06-16 No fix listed CWE-89

TI-2026-69253 CVE-2026-95606 · GHSA-39v2-8xcx-xqhh

PHP object injection in WordPress The Events Calendar plugin

MEDIUM 49

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00322 Published 2026-10-07 No fix listed CWE-502

TI-2026-67823 CVE-2026-97283 · GHSA-52qx-gr3f-hfqm

Object injection in WordPress Advanced Post Manager plugin

MEDIUM 49

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00345 Published 2026-10-05 No fix listed CWE-502

TI-2026-63964 CVE-2026-97196 · GHSA-wm87-9v37-7595

WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability

MEDIUM 48

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00441 Published 2026-09-30 No fix listed CWE-1289

TI-2026-83629 CVE-2026-62048 · GHSA-fqhx-4vhr-rp48

SQL injection in WordPress BookIt plugin

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00342 Published 2026-11-01 No fix listed CWE-89

TI-2026-69949 CVE-2026-96333 · GHSA-38mq-p4j9-92wm

Authentication bypass by spoofing in GiveWP WordPress plugin

LOW 38

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-10-09 No fix listed CWE-290

TI-2026-29448 CVE-2026-40780 · GHSA-6wpw-j4xp-qqv8

WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability

LOW 38

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-06-02 Fixed in 2.5.4.1 CWE-288

TI-2026-64018 CVE-2026-97287 · GHSA-wffc-82vg-7mv2

WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00251 Published 2026-09-30 No fix listed CWE-89

TI-2026-30921 CVE-2026-42662 · GHSA-qx6m-5r77-fx53

WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability

LOW 35

Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00316 Published 2026-06-15 No fix listed CWE-290

TI-2025-40954 CVE-2025-66533 · GHSA-mm3g-cv2q-cppg

WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability

LOW 35

Improper Control of Generation of Code ('Code Injection') vulnerability in Liquid Web / StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through 4.13.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00305 Published 2025-12-09 No fix listed CWE-94

TI-2026-75300 CVE-2026-111396

Missing authorization in WordPress Advanced Post Manager plugin

LOW 31

Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager:…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2026-10-16 No fix listed CWE-862

TI-2026-47270 CVE-2026-66599 · GHSA-phx4-j4pm-h7pj

WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-24 No fix listed CWE-79

TI-2026-30937 CVE-2026-42678 · GHSA-6rpm-7x8w-42p8

WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP allows DOM-Based XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00203 Published 2026-06-01 No fix listed CWE-79

TI-2026-83151 CVE-2026-119368 · GHSA-896r-vqx6-4j9f

Missing authorization in WordPress The Events Calendar plugin

LOW 30

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00314 Published 2026-10-30 No fix listed CWE-862

TI-2026-69545 CVE-2026-105893 · GHSA-mvfx-6788-f58w

Authorization bypass in WordPress Event Tickets plugin

LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-10-08 No fix listed CWE-639

TI-2026-69439 CVE-2026-66479 · GHSA-vhxj-w8cf-84xv

Cross-site request forgery in WPComplete plugin enables stored XSS

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00089 Published 2026-10-08 No fix listed CWE-352

TI-2026-67525 CVE-2026-103354 · GHSA-fqfj-m5mc-j28g

WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenber…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-04 No fix listed CWE-79

TI-2026-27132 CVE-2026-34900 · GHSA-ccj6-3h2m-whv5

WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.14.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-06-15 No fix listed CWE-79

TI-2026-75297 CVE-2026-110900

Missing authorization in WordPress BookIt plugin

LOW 29

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00186 Published 2026-10-16 No fix listed CWE-862

TI-2026-69547 CVE-2026-106600 · GHSA-g422-2gxf-r76f

Missing authorization in WordPress GiveWP plugin

LOW 29

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00191 Published 2026-10-08 No fix listed CWE-862

TI-2026-86482 CVE-2026-123464 · GHSA-j296-23f6-2mmc

Stored cross-site scripting in The Events Calendar WordPress plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calenda…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-11-07 No fix listed CWE-79

TI-2026-83172 CVE-2026-119369 · GHSA-g3c6-9ccr-c3qj

Stored cross-site scripting in The Events Calendar WordPress plugin

LOW 28

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00217 Published 2026-10-30 No fix listed CWE-79

TI-2026-83152 CVE-2026-119370 · GHSA-fhvg-rf7x-ccx7

Stored cross-site scripting in The Events Calendar WordPress plugin

LOW 28

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-30 No fix listed CWE-79

TI-2026-82424 CVE-2026-39742 · GHSA-8mp3-f366-f4qp

Stored cross-site scripting in Gutenberg Blocks by Kadence Blocks

LOW 28

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-10-29 No fix listed CWE-79

Open these records in search →

Critical	6
High	9
Medium	23
Low	0
No CVSS	0