NE
Vendor
netweblogic
24
CVEs
0
On KEV
0
New 30D
Products
EM7.5
Events Manager – Calendar, Bookings, Tickets, and more!
netweblogic
17 CVEs0 on KEV0 new
LW–
Login With Ajax
Netweblogic
3 CVEs0 on KEV0 new
EM5.4
Events Manager
NetWebLogic
2 CVEs0 on KEV0 new
EM–
Events Manager Pro
Netweblogic
1 CVEs0 on KEV0 new
MT8.8
Meta Tag Manager
netweblogic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-14945 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.4 | Sep 5 | Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes |
| CVE-2026-14280 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.6 | Aug 25 | Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys |
| CVE-2026-17089 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.1 | Aug 25 | Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter |
| CVE-2026-10627 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.3 | Aug 25 | Events Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' Parameters |
| CVE-2026-15023 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.5 | Aug 25 | Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action |
| CVE-2025-12976 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.4 | Dec 18 | Events Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode |
| CVE-2025-12407 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 4.3 | Dec 12 | Events Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location Deletion |
| CVE-2025-12408 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.3 | Dec 12 | Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure |
| CVE-2025-6976 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.4 | Jul 9 | Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes |
| CVE-2025-6975 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.1 | Jul 9 | Event Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` Parameter |
| CVE-2025-6970 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 7.5 | Jul 9 | Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter |
| CVE-2024-11260 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 7.5 | Feb 21 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter |
| CVE-2024-5889 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 6.1 | Jun 29 | Events Manager <= 6.4.8 - Reflected Cross-Site Scripting |
| CVE-2024-3492 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.4 | Jun 12 | Events Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category Shortcodes |
| CVE-2024-2110 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 4.3 | Mar 28 | Events Manager <= 6.4.7.1 - Cross-Site Request Forgery |
| CVE-2024-1770 | MT Meta Tag Manager netweblogic | 8.8 | Mar 28 | Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection |
| CVE-2024-2111 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 5.4 | Mar 28 | Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-0614 | EM Events Manager – Calendar, Bookings, Tickets, and more! netweblogic | 4.8 | Mar 13 | Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings |
| CVE-2018-0576 | EM Events Manager NetWebLogic | 5.4 | May 14 | Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified… |
| CVE-2013-1407 | EM Events Manager Netweblogic | – | May 13 | Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to… |
| CVE-2013-2707 | LW Login With Ajax Netweblogic | – | May 10 | Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for… |
| CVE-2012-4283 | LW Login With Ajax Netweblogic | – | Aug 13 | Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback… |
| CVE-2012-2759 | LW Login With Ajax Netweblogic | – | May 22 | Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject… |