LI
Vendor
Liquidweb
13
CVEs
0
On KEV
0
New 30D
Products
ET8.8
Event Tickets
Liquidweb
5 CVEs0 on KEV0 new
RC7.5
Restrict Content
Liquidweb
5 CVEs0 on KEV0 new
GT9.8
Give Tributes
LiquidWeb
1 CVEs0 on KEV0 new
GI9.8
Givewp
Liquidweb
1 CVEs0 on KEV0 new
WP6.1
Wpcomplete
Liquidweb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19658 | GT Give Tributes LiquidWeb | 9.8 | Sep 22 | Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter |
| CVE-2025-14844 | RC Restrict Content Liquidweb | 7.5 | Jan 16 | Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure |
| CVE-2024-13457 | ET Event Tickets Liquidweb | 5.3 | Jan 30 | Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure |
| CVE-2024-11090 | RC Restrict Content Liquidweb | 7.5 | Jan 26 | Membership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-37099 | GI Givewp Liquidweb | 9.8 | Aug 19 | WordPress GiveWP plugin <= 3.14.1 - Unauthenticated PHP Object Injection vulnerability |
| CVE-2024-31432 | RC Restrict Content Liquidweb | 5.3 | Apr 15 | WordPress Restrict Content plugin <= 3.2.8 - Broken Access Control vulnerability |
| CVE-2024-1316 | ET Event Tickets Liquidweb | 6.5 | Mar 4 | Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access |
| CVE-2024-1319 | ET Event Tickets Liquidweb | 4.3 | Mar 4 | Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure |
| CVE-2024-1053 | ET Event Tickets Liquidweb | 4.3 | Feb 22 | Event Tickets and Registration <= 5.8.1 - Missing Authorization |
| CVE-2023-47668 | RC Restrict Content Liquidweb | 7.5 | Nov 23 | WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure |
| CVE-2023-3182 | RC Restrict Content Liquidweb | 6.1 | Jul 17 | Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS |
| CVE-2022-45825 | WP Wpcomplete Liquidweb | 6.1 | Mar 28 | WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2019-16120 | ET Event Tickets Liquidweb | 8.8 | Sep 8 | CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature |