Vulnerabilities

TI-2026-58335 CVE-2026-84848 · GHSA-wq9j-rv5g-224f

WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Quick Event Manager <= 9.17 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-09-03 No fix listed CWE-79

TI-2026-58334 CVE-2026-84847 · GHSA-m275-m478-ffm6

WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-09-03 No fix listed CWE-862

TI-2026-58336 CVE-2026-84849 · GHSA-68qp-xj2p-87vv

WordPress Pre-Orders for WooCommerce plugin <= 2.3 - Bypass Vulnerability vulnerability

LOW 35

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce <= 2.3 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00289 Published 2026-09-03 No fix listed CWE-290

TI-2024-33901 CVE-2024-50469 · GHSA-3pp2-9g7m-mf2q

WordPress Textboxes plugin <= 0.1.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brightvesseldev Textboxes textboxes allows DOM-Based XSS.This issue affects Textboxes: from n/a through <= 0.1.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2024-10-28 No fix listed CWE-79

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks