Advisories · Technology

Pixelite Events Manager.

Every CVE that names Pixelite Events Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114694 CVE record

CVSS 7.1 High

WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability
- Pixelite Events Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Oct 2026
CVE-2026-42689 CVE record

CVSS 3.7 Low

WordPress Events Manager plugin <= 7.4.7 - Race Condition vulnerability
- Pixelite Events Manager
- Race condition
Not analysed yet 12 Oct 2026
CVE-2026-105068 CVE record

CVSS 5.3 Medium

WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability
- Pixelite Events Manager
- Information disclosure
Not analysed yet 5 Oct 2026
CVE-2026-66457 CVE record

CVSS 7.1 High

WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability
- Pixelite Events Manager
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2024-30515 CVE record

CVSS 4.3 Medium

WordPress Events Manager plugin <= 6.4.6.4 - Broken Access Control vulnerability
- Pixelite Events Manager
- Broken access control
Not analysed yet 9 Jun 2024
CVE-2024-30421 CVE record

CVSS 4.3 Medium

WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability
- Pixelite Events Manager
- Cross-site request forgery (CSRF)
Not analysed yet 28 Mar 2024
CVE-2023-48326 CVE record

CVSS 7.1 High

WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
- Pixelite Events Manager
- Cross-site scripting (XSS)
Not analysed yet 30 Nov 2023