Medium
CVE-2026-81791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2025-8091
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-48116
EventON <= 2.4.4 - Missing Authorization
High
CVE-2025-47494
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-32160
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-6910
EventON <= 2.2.16 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-6180
EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
Medium
CVE-2024-33940
EventON <= 2.2.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6005
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0235
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via get_virtual_users
Medium
CVE-2024-0236
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via config_virtual_event
Medium
CVE-2024-0233
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Reflected Cross-Site Scripting
Medium
CVE-2024-0237
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.8 (Pro) & <= 2.2.7 (Free) - Missing Authorization via eventon_save_virtual_event_settings
Medium
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Medium
CVE-2023-6244
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
Medium
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Low
CVE-2023-6046
EventON <= 2.1.7 - Authenticated (Admin+) HTML Injection
Medium
CVE-2023-4635
EventON <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-4388
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-2796
EventON <= 2.1 - Missing Authorization to Event Access
High
CVE-2023-3219
EventON <= 2.1 - Insecure Direct Object Reference to Unauthorized Post Access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.