Advisories · Technology
Event Booking Manager for WooCommerce.
Every CVE that names Event Booking Manager for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.7 Low
Event Booking Manager for WooCommerce 5.3.6 - 5.7.2 - Contributor+ Unpublished Event Disclosure via mpwem_load_event_list
- Event Booking Manager for WooCommerce
- Broken access control
- CVSS 4.9 Medium
Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure
- Event Booking Manager for WooCommerce
- Broken access control
- CVSS 3.7 Low
Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panel
- Event Booking Manager for WooCommerce
- Broken access control
- CVSS 5.4 Medium
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_event
- Event Booking Manager for WooCommerce
- Broken access control
- CVSS 5.4 Medium
Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content
- Event Booking Manager for WooCommerce
- Cross-site scripting (XSS)
- CVSS 6.6 Medium
Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content
- Event Booking Manager for WooCommerce
- Insecure deserialization