EM
Product
Events Manager
30
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 6Medium 22Low 1
Watch
Add Events Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-30515 | 8.8 | Jun 9 | Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4 Affected: before 6.4.7 |
| CVE-2025-6970 | 7.5 | Jul 9 | Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter Affected: before 6.6.5; 7.0.1 before 7.0.4 |
| CVE-2024-11260 | 7.5 | Feb 21 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter Affected: before 6.6.4 |
| CVE-2020-35012 | 7.2 | Dec 1 | The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection Affected: before 5.9.8 |
| CVE-2026-114694 New | 7.1 | Oct 24 | WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability Affected: through 7.4.8 |
| CVE-2026-66457 | 7.1 | Aug 6 | WordPress Events Manager plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability Affected: through 7.4.2 |
Showing 6