Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Event Booking Manager for WooCommerce 5.3.7 Clear all filters
TI-2026-13443 CVE-2026-16064 · GHSA-5hqh-mj83-f2f6

Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event

Priority MEDIUM 58

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checking a global capability, allowing users wit…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0023 Published 2026-08-02 Fixed in 5.3.7 CWE-863
TI-2026-13442 CVE-2026-16063 · GHSA-c58x-hvfg-9vjh

Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content

Priority MEDIUM 58

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public even…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-08-02 Fixed in 5.3.7 CWE-79
TI-2026-13441 CVE-2026-16062 · GHSA-xh9j-gpmv-5c2v

Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content

Priority LOW 32

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00594 Published 2026-08-02 Fixed in 5.3.7 CWE-502