Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Stephen Harris records in CISA KEVNo Stephen Harris vulnerabilities are listed in CISA KEV.
Priority LOW 28
The Event Organiser plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.12.9.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00261 · Published 2026-07-01 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Organiser: from n/a through <= 3.12.8…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00244 · Published 2025-12-30 · No fix listed CWE-862
