Read the docs

ashanjay

Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

ashanjay records in CISA KEV

No ashanjay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Eventon 18 records MEDIUM Eventon-lite 5 records LOW Rsvp Events 1 record MEDIUM

Records

5 records in Eventon-lite · all components

TI-2023-05663 CVE-2023-6158 · GHSA-pqm7-4j5w-6gc7

Missing authorization in ashanjay EventON – Events Calendar

Priority LOW 36

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the evo_eventpost_update_meta function i…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00561 Published 2024-01-10 No fix listed CWE-862
TI-2023-04273 CVE-2023-4635 · GHSA-836w-q8xf-8mq9

EventON <= 2.2.2 - Reflected Cross-Site Scripting

Priority LOW 29

The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00741 Published 2023-10-21 No fix listed CWE-79
TI-2023-05735 CVE-2023-6244 · GHSA-w5jx-c49w-xmwh

Cross-site request forgery in ashanjay EventON – Events Calendar

Priority LOW 28

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4 (Pro) & 2.2.8 (Free).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00251 Published 2024-01-11 No fix listed CWE-352
TI-2023-05733 CVE-2023-6242 · GHSA-3rp5-4w7x-5cpg

Cross-site request forgery in ashanjay EventON – Events Calendar

Priority LOW 28

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4 (for Pro) & 2.2.7 (for Free).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00257 Published 2024-01-11 No fix listed CWE-352
Open these records in search →