Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

38 records

Vendor: Liquid Web / StellarWP Clear all filters
TI-2026-86482 CVE-2026-123464 · GHSA-j296-23f6-2mmc

Stored cross-site scripting in The Events Calendar WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calenda…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-11-07 No fix listed CWE-79
TI-2026-86484 CVE-2026-123469 · GHSA-6648-57m9-x39h

Cross-site scripting in WordPress The Events Calendar plugin

Priority LOW 24

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Code Injection.This issue affects The Events Calendar:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00324 Published 2026-11-07 No fix listed CWE-80
TI-2026-83629 CVE-2026-62048 · GHSA-fqhx-4vhr-rp48

SQL injection in WordPress BookIt plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00342 Published 2026-11-01 No fix listed CWE-89
TI-2026-83270 CVE-2026-62019 · GHSA-6xjm-fgqg-xjxv

Missing authorization in WordPress BookIt plugin

Priority LOW 20

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2026-10-30 No fix listed CWE-862
TI-2026-83272 CVE-2026-62047 · GHSA-qh3p-qcm6-6w26

Missing authorization in Event Tickets WordPress plugin

Priority LOW 20

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2026-10-30 No fix listed CWE-862
TI-2026-83205 CVE-2026-62055 · GHSA-ww86-f7fh-m9j8

Missing authorization in WordPress Event Tickets plugin

Priority LOW 20

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-10-30 No fix listed CWE-862
TI-2026-83214 CVE-2026-119367 · GHSA-5pgh-gr97-8f3m

Missing authorization in The Events Calendar WordPress plugin

Priority LOW 24

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00231 Published 2026-10-30 No fix listed CWE-862
TI-2026-83172 CVE-2026-119369 · GHSA-g3c6-9ccr-c3qj

Stored cross-site scripting in The Events Calendar WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calenda…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00217 Published 2026-10-30 No fix listed CWE-79
TI-2026-83151 CVE-2026-119368 · GHSA-896r-vqx6-4j9f

Missing authorization in WordPress The Events Calendar plugin

Priority LOW 30

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00314 Published 2026-10-30 No fix listed CWE-862
TI-2026-83152 CVE-2026-119370 · GHSA-fhvg-rf7x-ccx7

Stored cross-site scripting in The Events Calendar WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calenda…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-30 No fix listed CWE-79
TI-2026-82424 CVE-2026-39742 · GHSA-8mp3-f366-f4qp

Stored cross-site scripting in Gutenberg Blocks by Kadence Blocks

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenber…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-10-29 No fix listed CWE-79
TI-2026-80317 CVE-2026-115602 · GHSA-ggvv-hrvx-479f

Stored cross-site scripting in Kadence Blocks WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenber…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0017 Published 2026-10-26 No fix listed CWE-79
TI-2026-76424 CVE-2026-110902 · GHSA-fr43-f7hf-g8fg

Authorization bypass in WordPress Event Tickets plugin

Priority LOW 19

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Ticket…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00225 Published 2026-10-19 No fix listed CWE-639
TI-2026-75300 CVE-2026-111396

Missing authorization in WordPress Advanced Post Manager plugin

Priority LOW 31

Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager:…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2026-10-16 No fix listed CWE-862
TI-2026-75299 CVE-2026-110903

Stored cross-site scripting in WordPress The Events Calendar plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calenda…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-16 No fix listed CWE-79
TI-2026-75297 CVE-2026-110900

Missing authorization in WordPress BookIt plugin

Priority LOW 29

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00186 Published 2026-10-16 No fix listed CWE-862
TI-2026-69949 CVE-2026-96333 · GHSA-38mq-p4j9-92wm

Authentication bypass by spoofing in GiveWP WordPress plugin

Priority LOW 38

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2026-10-09 No fix listed CWE-290
TI-2026-69545 CVE-2026-105893 · GHSA-mvfx-6788-f58w

Authorization bypass in WordPress Event Tickets plugin

Priority LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-10-08 No fix listed CWE-639
TI-2026-69544 CVE-2026-105891 · GHSA-rfp5-h757-8q7c

Missing authorization in WordPress Event Tickets plugin

Priority LOW 19

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2026-10-08 No fix listed CWE-862
TI-2026-69543 CVE-2026-105890 · GHSA-297g-4f9h-4652

Stored cross-site scripting in Kadence Blocks WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Stored XSS.This issue affects Gutenber…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00156 Published 2026-10-08 No fix listed CWE-79
TI-2026-69542 CVE-2026-105888 · GHSA-ghv5-3c96-c756

Event Tickets WordPress plugin Broken Access Control (Missing Authorization)

Priority LOW 24

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00182 Published 2026-10-08 No fix listed CWE-862
TI-2026-69439 CVE-2026-66479 · GHSA-vhxj-w8cf-84xv

Cross-site request forgery in WPComplete plugin enables stored XSS

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00089 Published 2026-10-08 No fix listed CWE-352
TI-2026-69547 CVE-2026-106600 · GHSA-g422-2gxf-r76f

Missing authorization in WordPress GiveWP plugin

Priority LOW 29

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00191 Published 2026-10-08 No fix listed CWE-862
TI-2026-69253 CVE-2026-95606 · GHSA-39v2-8xcx-xqhh

PHP object injection in WordPress The Events Calendar plugin

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00322 Published 2026-10-07 No fix listed CWE-502
TI-2026-67823 CVE-2026-97283 · GHSA-52qx-gr3f-hfqm

Object injection in WordPress Advanced Post Manager plugin

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00345 Published 2026-10-05 No fix listed CWE-502
Load more