LW
Vendor
Liquid Web / StellarWP
28
CVEs
0
On KEV
19
New 30D
Products
GI10.0
GiveWP
Liquid Web / StellarWP
9 CVEs0 on KEV4 new
ET8.5
Event Tickets
Liquid Web / StellarWP
7 CVEs0 on KEV6 new
TE9.8
The Events Calendar
Liquid Web / StellarWP
3 CVEs0 on KEV2 new
AP9.8
Advanced Post Manager
Liquid Web / StellarWP
2 CVEs0 on KEV2 new
GB7.1
Gutenberg Blocks by Kadence Blocks
Liquid Web / StellarWP
3 CVEs0 on KEV3 new
BO7.5
BookIt
Liquid Web / StellarWP
2 CVEs0 on KEV1 new
WP7.1
WPComplete
Liquid Web / StellarWP
2 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115602 New | GB Gutenberg Blocks by Kadence Blocks Liquid Web / StellarWP | 6.5 | Oct 26 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110902 | ET Event Tickets Liquid Web / StellarWP | 4.3 | Oct 19 | WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-111396 | AP Advanced Post Manager Liquid Web / StellarWP | 7.1 | Oct 16 | WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability |
| CVE-2026-110903 | TE The Events Calendar Liquid Web / StellarWP | 6.5 | Oct 16 | WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-110900 | BO BookIt Liquid Web / StellarWP | 5.3 | Oct 16 | WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability |
| CVE-2026-96333 | GI GiveWP Liquid Web / StellarWP | 7.5 | Oct 9 | WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability |
| CVE-2026-105893 | ET Event Tickets Liquid Web / StellarWP | 5.3 | Oct 8 | WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability |
| CVE-2026-105891 | ET Event Tickets Liquid Web / StellarWP | 4.3 | Oct 8 | WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability |
| CVE-2026-105890 | GB Gutenberg Blocks by Kadence Blocks Liquid Web / StellarWP | 6.5 | Oct 8 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-105888 | ET Event Tickets Liquid Web / StellarWP | 5.4 | Oct 8 | WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability |
| CVE-2026-66479 | WP WPComplete Liquid Web / StellarWP | 7.1 | Oct 8 | WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability |
| CVE-2026-106600 | GI GiveWP Liquid Web / StellarWP | 5.3 | Oct 8 | WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability |
| CVE-2026-95606 | TE The Events Calendar Liquid Web / StellarWP | 9.8 | Oct 7 | WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability |
| CVE-2026-97283 | AP Advanced Post Manager Liquid Web / StellarWP | 9.8 | Oct 5 | WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability |
| CVE-2026-104675 | ET Event Tickets Liquid Web / StellarWP | 4.3 | Oct 5 | WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability |
| CVE-2026-104404 | GI GiveWP Liquid Web / StellarWP | 6.5 | Oct 5 | WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103354 | GB Gutenberg Blocks by Kadence Blocks Liquid Web / StellarWP | 7.1 | Oct 4 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.11.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-97287 | ET Event Tickets Liquid Web / StellarWP | 8.5 | Sep 30 | WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability |
| CVE-2026-97196 | GI GiveWP Liquid Web / StellarWP | 9.1 | Sep 30 | WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability |
| CVE-2026-82222 | GI GiveWP Liquid Web / StellarWP | 10.0 | Aug 28 | WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-66599 | WP WPComplete Liquid Web / StellarWP | 7.1 | Aug 24 | WordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-49772 | TE The Events Calendar Liquid Web / StellarWP | 9.3 | Jun 16 | WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability |
| CVE-2026-42662 | ET Event Tickets Liquid Web / StellarWP | 6.5 | Jun 15 | WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability |
| CVE-2026-34900 | GI GiveWP Liquid Web / StellarWP | 7.1 | Jun 15 | WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-40780 | BO BookIt Liquid Web / StellarWP | 7.5 | Jun 2 | WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability |
| CVE-2026-42678 | GI GiveWP Liquid Web / StellarWP | 7.1 | Jun 1 | WordPress GiveWP plugin <= 4.14.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-66533 | GI GiveWP Liquid Web / StellarWP | 6.5 | Dec 9 | WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocde Execution vulnerability |
| CVE-2023-23672 | GI GiveWP Liquid Web / StellarWP | 5.4 | Jan 2 | WordPress GiveWP plugin <= 2.25.1 - Arbitrary Content Deletion vulnerability |