Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-60121

WordPress WooEvents plugin <= 4.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooEvents: from n/a through <= 4.1.7.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Exthemes Wordpress
Products
Wooevents Wordpress
CVE-2024-8671

WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite

The WooEvents - Calendar and Event Booking plugin for WordPress is vulnerable to arbitrary file overwrite due to insufficient file path validation in the inc/barcode.php file in all versions up to, and including, 4.1.2. This makes it possible for unauthenticated attackers to overwrite arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

CVSS 3.1 · 9.1 Critical EPSS 1.0% KEV · Not listed
Vendors
Codecanyon Exthemes
Products
Wooevents Wooevents