Advisories · Technology
WP Event Manager.
Every CVE that names WP Event Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR
- WP Event Manager
- Broken access control
- CVSS 8.1 High
WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids
- WP Event Manager
- Broken access control
- CVSS 8.1 High
WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability
- WP Event Manager
- File inclusion
- CVSS 5.3 Medium
WordPress WP Event Manager plugin <= 3.2.0 - Broken Access Control vulnerability
- WP Event Manager
- Broken access control