Vulnerabilities

TI-2025-05008 CVE-2025-5568 · GHSA-j4j4-476p-c2qf

WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2025-06-07 No fix listed CWE-79

TI-2024-28809 CVE-2024-43138 · GHSA-4299-pp5c-6rgf

WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.2.1 - Local File Inclusion vulnerability

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerce allows PHP Local File Inclusion.This issue affects Event Manager for WooCommer…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0063 Published 2024-08-13 No fix listed CWE-22

TI-2024-16313 CVE-2024-24796 · GHSA-96x5-92fh-q2xc

WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection

MEDIUM 41

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin.This issue affects Event Manager and Tickets Selling Plugin for W…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00499 Published 2024-02-12 No fix listed CWE-502

TI-2023-18246 CVE-2023-36383 · GHSA-j967-q6rg-5285

WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 3.9.5 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00331 Published 2023-07-18 No fix listed CWE-79

TI-2023-12967 CVE-2023-28422 · GHSA-rwh5-4j2w-cj8g

WordPress Event Manager for WooCommerce Plugin <= 3.8.6 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <= 3.8.6.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-03-23 No fix listed CWE-79

TI-2023-00139 CVE-2023-0144 · GHSA-27g3-qf2q-r4wm

Event Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSS

MEDIUM 58

The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00477 Published 2023-02-06 Fixed in 3.8.0 CWE-79

TI-2022-00401 CVE-2022-0478 · GHSA-5ggf-pcfp-jv8f

Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL Injection