Advisories · Technology
EventON (Pro) - WordPress Virtual Event Calendar Plugin.
Every CVE that names EventON (Pro) - WordPress Virtual Event Calendar Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- SQL injection
- CVSS 6.4 Medium
EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Broken access control
- CVSS 4.3 Medium
EventON PRO - WordPress Virtual Event Calendar Plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
- ashanjay EventON – Events Calendar
- EventON (Pro) - WordPress Virtual Event Calendar Plugin
- Broken access control