Medium
CVE-2025-6976
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filters
High
CVE-2025-6970
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
Medium
CVE-2025-6975
Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter
Critical
CVE-2025-32510
Ovatheme Events Manager <= 1.8.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-1249
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.4.1 - Missing Authorization
High
CVE-2024-11260
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
Medium
CVE-2024-50532
Events Manager Pro – extended <= 0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-7717
WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
Medium
CVE-2024-5889
Events Manager <= 6.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-3492
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes
Medium
CVE-2024-30515
Events Manager <= 6.4.6.4 - Missing Authorization
Medium
CVE-2024-2110
Events Manager <= 6.4.7.1 - Cross-Site Request Forgery
Medium
CVE-2024-2111
Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0614
Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
Low
CVE-2022-1194
Mobile Events Manager <= 1.4.7 - Authenticated (Administrator+) CSV Injection
Medium
CVE-2021-25049
Mobile Events Manager < 1.4.4 - Cross-Site Scripting
Medium
CVE-2020-35037
Events Manager <= 5.9.7.3 - Cross-Site Scripting
High
CVE-2020-35012
Events Manager <= 5.9.7.3 - Admin+ SQL Injection
High
74b81d31-8ee6-47cf-a5e8-3cf0900ebea0
Events Manager < 5.9.7.2 & Events Manager Pro < 2.6.7.2 - Unauthenticated CSV Injection
Medium
156e64f2-87a4-40a0-bac8-3dc1f702b0a1
Events Manager <= 5.9.7.1 - CSV Injection
Medium
CVE-2019-16523
Events Manager <= 5.9.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2018-13137
Events Manager <= 5.9.4 - Cross-Site Scripting
Medium
CVE-2018-0576
Events Manager <= 5.8.1.3 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.