agentprime: netweblogic-events-manager-calendar-bookings-tickets-and-moreEvery new CVE for netweblogic-events-manager-calendar-bookings-tickets-and-more.https://agentprime.io/CVE-2025-14945: Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributeshttps://agentprime.io/advisories/CVE-2025-14945/https://agentprime.io/advisories/CVE-2025-14945/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 05:30:55 GMTCVECVE-2026-14280: Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keyshttps://agentprime.io/advisories/CVE-2026-14280/https://agentprime.io/advisories/CVE-2026-14280/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 03:27:07 GMTCVECVE-2026-17089: Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameterhttps://agentprime.io/advisories/CVE-2026-17089/https://agentprime.io/advisories/CVE-2026-17089/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 03:27:06 GMTCVECVE-2026-10627: Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parametershttps://agentprime.io/advisories/CVE-2026-10627/https://agentprime.io/advisories/CVE-2026-10627/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 02:26:48 GMTCVECVE-2026-15023: Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Actionhttps://agentprime.io/advisories/CVE-2026-15023/https://agentprime.io/advisories/CVE-2026-15023/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 01:26:44 GMTCVECVE-2025-12976: Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcodehttps://agentprime.io/advisories/CVE-2025-12976/https://agentprime.io/advisories/CVE-2025-12976/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 07:20:45 GMTCVECVE-2025-12407: Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletionhttps://agentprime.io/advisories/CVE-2025-12407/https://agentprime.io/advisories/CVE-2025-12407/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 11:15:51 GMTCVECVE-2025-12408: Events Manager <= 7.2.2.2 - Unauthenticated Information Exposurehttps://agentprime.io/advisories/CVE-2025-12408/https://agentprime.io/advisories/CVE-2025-12408/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 11:15:50 GMTCVECVE-2025-6976: Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodeshttps://agentprime.io/advisories/CVE-2025-6976/https://agentprime.io/advisories/CVE-2025-6976/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Jul 2025 22:22:47 GMTCVECVE-2025-6975: Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameterhttps://agentprime.io/advisories/CVE-2025-6975/https://agentprime.io/advisories/CVE-2025-6975/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Jul 2025 22:22:47 GMTCVECVE-2025-6970: Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameterhttps://agentprime.io/advisories/CVE-2025-6970/https://agentprime.io/advisories/CVE-2025-6970/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.56 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Jul 2025 22:22:46 GMTCVEcriticalCVE-2024-11260: Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameterhttps://agentprime.io/advisories/CVE-2024-11260/https://agentprime.io/advisories/CVE-2024-11260/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Feb 2025 05:22:32 GMTCVECVE-2024-5889: Events Manager <= 6.4.8 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-5889/https://agentprime.io/advisories/CVE-2024-5889/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Jun 2024 04:33:28 GMTCVECVE-2024-3492: Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodeshttps://agentprime.io/advisories/CVE-2024-3492/https://agentprime.io/advisories/CVE-2024-3492/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 11:05:08 GMTCVECVE-2024-2110: Events Manager <= 6.4.7.1 - Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2024-2110/https://agentprime.io/advisories/CVE-2024-2110/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2024 02:04:10 GMTCVECVE-2024-2111: Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-2111/https://agentprime.io/advisories/CVE-2024-2111/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2024 02:04:07 GMTCVECVE-2024-0614: Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settingshttps://agentprime.io/advisories/CVE-2024-0614/https://agentprime.io/advisories/CVE-2024-0614/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:26:52 GMTCVE