Events Made Easy (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-06. Vendor: Unknown.

CVEs of Events Made Easy

• CVE-2026-14842 - CVSS 5.3 (medium), 2026-08-06: The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated…
• CVE-2026-14843 - CVSS 5.3 (medium), 2026-07-31: The Events Made Easy WordPress plugin before 3.1.4 does not verify that the requester is authorized to modify the targeted record when handling an…
• CVE-2022-1905 - CVSS 9.8 (critical), 2022-06-20: The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action…
• CVE-2021-25030 - CVSS 8.8 (high), 2022-01-03: The Events Made Easy WordPress plugin before 2.2.36 does not sanitise and escape the search_text parameter before using it in a SQL statement via the…
• CVE-2021-24813 - CVSS 4.8 (medium), 2021-11-01: The Events Made Easy WordPress plugin before 2.2.24 does not sanitise and escape Custom Field Names, allowing high privilege users to perform Cross-Site…