Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: vcita Component: Event Registration Calendar By Vcita Clear all filters
TI-2023-02261 CVE-2023-2407 · GHSA-m4qh-7xhr-7xq4

Cross-site request forgery in vcita Event Registration Calendar By vcita

Priority LOW 29

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site Request Forgery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00419 Published 2023-06-03 No fix listed CWE-352
TI-2023-02260 CVE-2023-2406 · GHSA-g4r7-hv6x-5c72

Cross-site scripting in vcita Event Registration Calendar By vcita

Priority LOW 30

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00755 Published 2023-06-03 No fix listed CWE-79