Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Event Espresso Component: Event Espresso Clear all filters
TI-2024-06383 CVE-2024-6883 · GHSA-593p-xc9r-fqp9

Missing authorization in Event Espresso – Event Registration & Ticketing Sales

Priority LOW 20

The Event Espresso 4 Decaf – Event Registration Event Ticketing plugin for WordPress is vulnerable to limited unauthorized plugin settings modification due to a missing capability check on the saveTimezoneString and some…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-08-21 No fix listed CWE-862
TI-2020-15988 CVE-2020-26153 · GHSA-v2mg-qj93-cvhw

A cross-site scripting (XSS) vulnerability in…

Priority LOW 34

A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.10.7.p for WordPress a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04378 Published 2021-07-13 No fix listed CWE-79
TI-2017-14751 CVE-2017-1002026 · GHSA-rvvr-r24x-gg3r

SQL injection in Event Expresso Free

Priority MEDIUM 41

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01711 Published 2017-09-14 Fixed in 3.1.37.11.L CWE-89