Search vulnerabilities

Results 32

Export CSV
CVE-2018-9020

The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.

CVSS 3.0 · 5.4 Medium EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2018-13137

The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI.

CVSS 3.0 · 4.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2018-0576

Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0 · 5.4 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2013-7480

The events-manager plugin before 5.3.6.1 for WordPress has XSS via the booking form and admin areas.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products