Community Events (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-05. Vendor: Unknown.

CVEs of Community Events

• CVE-2024-6270 - CVSS 4.8 (medium), 2024-08-05: The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2024-6271 - CVSS 5.4 (medium), 2024-07-22: The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin…
• CVE-2021-24496 - CVSS 6.1 (medium), 2021-08-02: The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before…