Login Request a demo
EM
Product
Event Monster
by Awplife · last CVE Jan 13, 2025
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 3Medium 3Low 0
Severity
All severities6Critical0High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Event Monster to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5059
7.5
0%
Jun 21
WordPress Event Monster Plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
Affected: through 1.4.0
CVE-2024-1895
7.5
1%
Apr 30
Event Monster <= 1.3.9 - Authenticated(Contributor+) PHP Object Injection via Custom Meta
Affected: before 1.4.0
CVE-2022-3720
7.2
1%
Nov 21
The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which could lead to SQL Injection exploitable by…
Affected: before 1.2.0
CVE-2023-47525
5.4
0%
Dec 21
WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
Affected: through 1.3.2
CVE-2024-11396
5.3
2%
Jan 13
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Affected: before 1.4.4
CVE-2022-3336
4.3
0%
Nov 21
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via…
Affected: before 1.2.0
Showing 6