Eventon (Unknown) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-09. Vendor: Unknown.
CVEs of Eventon
- CVE-2024-6910 - CVSS 4.8 (medium), 2024-09-09: The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2024-4752 - CVSS 5.9 (medium), 2024-07-13: The EventON WordPress plugin before 2.2.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-7200 - CVSS 6.1 (medium), 2024-01-29: The EventON WordPress plugin before 4.4.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…
- CVE-2024-0235 - CVSS 5.3 (medium), 2024-01-16: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users…
- CVE-2024-0238 - CVSS 6.1 (medium), 2024-01-16: The EventON Premium WordPress plugin before 4.5.6, EventON WordPress plugin before 2.2.8 do not have authorisation in an AJAX action, and does not ensure that…
- CVE-2024-0233 - CVSS 6.1 (medium), 2024-01-16: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in…
- CVE-2024-0237 - CVSS 5.3 (medium), 2024-01-16: The EventON WordPress plugin through 4.5.8, EventON WordPress plugin before 2.2.7 do not have authorisation in some AJAX actions, allowing unauthenticated…
- CVE-2024-0236 - CVSS 5.3 (medium), 2024-01-16: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users…
- CVE-2023-6005 - CVSS 4.8 (medium), 2024-01-16: The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which could allow high…
- CVE-2023-6046 - CVSS 4.8 (medium), 2024-01-16: The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-4388 - CVSS 4.8 (medium), 2023-10-16: The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-3219 - CVSS 5.3 (medium), 2023-07-10: The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing…
- CVE-2023-2796 - CVSS 5.3 (medium), 2023-07-10: The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to…
