WP Event Manager

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

WP Event Manager records in CISA KEV

No WP Event Manager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Event Manager 10 records LOW Event Banner 1 record LOW User Profile Avatar 1 record MEDIUM

Records

1 record in Event Banner · all components

TI-2021-06544 CVE-2021-24252 · GHSA-4r26-734p-358q

Event Banner <= 1.3 - Arbitrary File Upload to RCE

LOW 35

The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01678 Published 2021-05-05 No fix listed CWE-434

Open these records in search →

Critical	0
High	4
Medium	12
Low	0
No CVSS	0