Advisories · Technology
ashanjay EventON – Events Calendar.
Every CVE that names ashanjay EventON – Events Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
- ashanjay EventON – Events Calendar
- Information disclosure
- CVSS 7.2 High
EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
- ashanjay EventON – Events Calendar
- Broken access control
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Broken access control
- CVSS 6.1 Medium
EventON <= 2.2.2 - Reflected Cross-Site Scripting
- ashanjay EventON – Events Calendar
- Cross-site scripting (XSS)